wechatpay-basic-payment

Pass

Audited by Gen Agent Trust Hub on Aug 19, 2026

Risk Level: SAFE
Full Analysis
  • [PROMPT_INJECTION]: No malicious prompt injection patterns were detected. The skill instructions focus on behavioral constraints that ensure the agent provides accurate, retrieved information rather than generated content, and it maintains a strict confirmation protocol with the user.
  • [DATA_EXPOSURE_AND_EXFILTRATION]: No sensitive data exposure or exfiltration patterns were found. All code examples use industry-standard placeholders for merchant IDs, certificate serial numbers, and private key paths. Network operations in the diagnostic scripts are restricted to the official WeChat Pay API domain (api.mch.weixin.qq.com).
  • [OBFUSCATION]: No hidden or obfuscated content (such as Base64-encoded commands, zero-width characters, or homoglyphs) was identified in the documentation or scripts.
  • [UNVERIFIABLE_DEPENDENCIES_AND_REMOTE_CODE_EXECUTION]: The skill does not perform any remote script execution or download unverifiable packages. It provides local Python scripts for order diagnostics, which are executed with user-supplied parameters and only after explicit consent.
  • [PRIVILEGE_ESCALATION]: No attempts to acquire elevated permissions (e.g., sudo, chmod 777) were detected in any of the provided scripts or instructions.
  • [PERSISTENCE_MECHANISMS]: The skill does not attempt to establish persistence across sessions.
  • [METADATA_POISONING]: Metadata in the skill definition is accurate and consistent with the provided capabilities.
  • [INDIRECT_PROMPT_INJECTION]: While the skill processes user-supplied transaction data, it includes robust boundary markers and instructions to the agent to avoid obeying embedded commands within that data. The agent's capabilities are limited to showing information and running diagnostic GET requests.
  • [DYNAMIC_EXECUTION]: The skill does not generate or execute code dynamically based on untrusted inputs. The provided diagnostic scripts are static and use standard libraries.
  • [DYNAMIC_CONTEXT_INJECTION]: No use of the ! dynamic command execution syntax was found in the skill's primary instruction file.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 19, 2026, 07:45 PM
Security Audit — agent-trust-hub — wechatpay-basic-payment