wxmini-security-audit

To perform a static security audit on a WeChat mini program, provide the directory path to initiate an orchestrated multi-agent workflow that decompiles, pre-scans, and analyzes assets through Phase 0 to 3.

A WeChat mini program static analysis detects sensitive information leakage, extracts API endpoints, identifies encryption algorithms, and finds vulnerabilities by running parallel agents across the decompiled codebase.

Extract API endpoints and secrets from a WeChat mini program by running the multi-agent static analysis, which automatically generates structured outputs including api_endpoints.json and secrets_report.json.

Yes, you can trigger custom analysis requirements during an optional Phase 2.5, inserting your specific checks between the parallel agent analysis and the final security report generation.

Auditing a WeChat mini program generates structured outputs including security_report.md, api_endpoints.json, secrets_report.json, and detailed JSONs to ensure strict data locality, versioning, and provenance.

The WeChat mini program security audit runs locally with strict data locality and no external dependencies, ensuring the static analysis of assets and generated reports remain secure and reproducible.