setup-notifications-via-wecom
Pass
Audited by Gen Agent Trust Hub on Sep 7, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill stores sensitive WeCom webhook keys in
~/.config/setup-notifications-via-wecom/config.jsonand correctly instructs the user to applychmod 600to protect the file from unauthorized local access. - [SAFE]: Network operations are performed via
urllib.requesttoqyapi.weixin.qq.com, which is the official and well-known endpoint for WeCom services. The scripts explicitly unset proxy environment variables (e.g.,HTTP_PROXY) to ensure direct and secure connectivity to the Tencent API. - [SAFE]: The bundled Python scripts (
send_wecom.pyandset_recipient.py) include self-integrity checks. They verify their own absolute paths and SHA256 digests against the local configuration before proceeding, preventing the execution of modified or stale scripts. - [SAFE]: The skill processes user-supplied messages and log data for notification delivery. It mitigates potential indirect prompt injection risks by using structured JSON serialization (
json.dumps) and targeting the plain-text message type of the WeCom API, ensuring that incoming data is not interpreted as executable commands by the recipient.
Audit Metadata