baoyu-post-to-wechat
Pass
Audited by Gen Agent Trust Hub on Oct 26, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses system-level commands and scripts, including macOS AppleScript (
osascript), Windows PowerShell, and Linux utilities (xclip,xdotool), to manage the system clipboard and simulate keyboard input for browser automation. - [EXTERNAL_DOWNLOADS]: It fetches remote images from URLs found within the input Markdown files and dynamically downloads code highlighting modules and other rendering assets from external CDNs and services like PlantUML.
- [DYNAMIC_EXECUTION]: Utilizes dynamic imports (e.g., for infographic and mermaid rendering) and browser-side script execution via the Chrome DevTools Protocol to handle complex content formatting.
- [DATA_EXPOSURE]: Accesses environment variables and
.envfiles in dedicated configuration directories to manage WeChat API credentials and user preferences.
Audit Metadata