Skills
skills/aradotso/devtools-skills/wechat-devtools-mcp/Gen Agent Trust Hub

wechat-devtools-mcp

Pass

Audited by Gen Agent Trust Hub on Jun 13, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: Interfaces with the official WeChat Developer Tools CLI (cli.bat on Windows or cli on macOS) to perform IDE management, project compilation, and application uploads.
  • [EXTERNAL_DOWNLOADS]: Installs the wechat-devtools-mcp server package using the uv tool and retrieves the skill's instructions from a public GitHub repository (github.com/WaterTian/wechat-devtools-mcp). These operations use standard package management and version control systems.
  • [COMMAND_EXECUTION]: Includes the wechat_automator tool with an evaluate action that executes JavaScript within the mini-program runtime environment. This is a legitimate functional requirement for debugging and inspecting the application state.
  • [DATA_EXFILTRATION]: No unauthorized data collection or exfiltration patterns were detected. File access is scoped to the developer-defined WECHAT_PROJECT_PATH, and network activities are restricted to local IDE communication and authorized WeChat deployment endpoints.
  • [PROMPT_INJECTION]: The skill content does not contain instructions attempting to bypass safety filters, override agent behavior, or extract system prompts.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 13, 2026, 10:04 AM
Security Audit — agent-trust-hub — wechat-devtools-mcp