notify-wecom

Pass

Audited by Gen Agent Trust Hub on Sep 16, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes curl to send data to the WeCom webhook URL. It also reads configuration files using standard shell commands.
  • [EXTERNAL_DOWNLOADS]: The skill performs an outgoing network request to the WeCom API endpoint (https://qyapi.weixin.qq.com/cgi-bin/webhook/send?key=...) to deliver the message. This is the primary function of the skill and targets a well-known service.
  • [DATA_EXFILTRATION]: While the skill sends data externally, it is the intended purpose (notification). It only sends the user-provided message and does not access sensitive system files or credentials beyond the webhook key stored in its own config.
  • [SAFE]: No malicious patterns such as prompt injection, obfuscation, or privilege escalation were detected.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 16, 2026, 04:54 PM