Find security flaws in your WeChat mini-program.
Audits WeChat mini-program code locally and produces security findings, an API inventory, and remediation reports.
When to use it
Use when asked to audit a WeChat mini-program or wxapkg directory for vulnerabilities, sensitive-data leaks, or API security issues.
Give it a mini-program directory path; it runs a local security audit and writes reports and structured findings into wxaudit-output/.
What you provide
Requires Python 3.x; its scanner scripts use only the standard library.
Requires Windows because the decompilation workflow depends on unveilr.exe.
Requires the WeChat mini-program decompiler binary, obtained separately and placed in tools/.
No additional actions listed.