wechat-draft-publisher
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill manages sensitive credentials (AppID and AppSecret) using a local configuration file located at
~/.wechat-publisher/config.json. The installation script explicitly sets restricted file permissions (chmod 600), ensuring only the current user can access the secrets. - [SAFE]: Network activity is restricted to the official WeChat API domain (
api.weixin.qq.com) for content publishing and several well-known IP lookup services (ifconfig.me,ipify.org,ipinfo.io) used for the legitimate purpose of assisting users with IP whitelist configuration. - [SAFE]: The skill uses standard, version-pinned dependencies from official registries (e.g., the
requestslibrary) and contains no obfuscated code or hidden execution paths.
Audit Metadata