notify-wecom
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill executes
curlto send data to the WeCom webhook URL. It also reads configuration files using standard shell commands. - [EXTERNAL_DOWNLOADS]: The skill performs an outgoing network request to the WeCom API endpoint (
https://qyapi.weixin.qq.com/cgi-bin/webhook/send?key=...) to deliver the message. This is the primary function of the skill and targets a well-known service. - [DATA_EXFILTRATION]: While the skill sends data externally, it is the intended purpose (notification). It only sends the user-provided message and does not access sensitive system files or credentials beyond the webhook key stored in its own config.
- [SAFE]: No malicious patterns such as prompt injection, obfuscation, or privilege escalation were detected.
Audit Metadata