wechat-official-account
Pass
Audited by Gen Agent Trust Hub on May 6, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes
curlandjqfor robust network communication and secure JSON processing. - [EXTERNAL_DOWNLOADS]: All network operations target
api.weixin.qq.com, which is the official and well-known endpoint for WeChat services. - [SAFE]: The skill provides explicit instructions to protect credentials and uses safe interpolation methods to prevent injection attacks. An analysis of potential indirect prompt injection surfaces confirms that user-supplied data (ingestion points) is correctly handled through structural escaping (boundary markers) before being sent to the API (capability inventory).
Audit Metadata