aws-wechat-article-publish
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local Python scripts (
publish.py,article_init.py, andgetdraft.py) to automate interactions with the WeChat Official Account API and manage local article files. - [DATA_EXFILTRATION]: Accesses WeChat API credentials (
APPID,APPSECRET) stored inaws.envand transmits them toapi.weixin.qq.com(a well-known service) to facilitate authentication and content publishing. It also uploads article data and images to the same destination as part of its primary function. - [INDIRECT_PROMPT_INJECTION]: The skill ingests and processes user-provided content from
article.htmlandarticle.yamlfor publishing. - Ingestion points: Reads content and metadata from
article.htmlandarticle.yamlwithin article directories. - Boundary markers: The skill instructions define a "publish_completed gate" that requires checking for
placeholdertext within the content before marking a publication as complete. - Capability inventory: Includes shell command execution for article management, filesystem writes for metadata and links, and network POST requests to the WeChat API.
- Sanitization: Content is checked for specific placeholders, but the skill otherwise relies on the agent or user for content safety before transmission.
Audit Metadata