notion
Pass
Audited by Gen Agent Trust Hub on May 19, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local utility scripts,
get-token.shfor Linux/macOS andget-token.ps1for Windows, to fetch authentication tokens for every API request. - [SAFE]: The authentication process fetches tokens from an external service hosted on a well-known domain (
jprx.m.qq.com). This is documented as a standard part of the skill's integration workflow. - [SAFE]: The skill includes robust safety rules (AI behavior contracts) specifically designed to prevent the leakage of access tokens. It explicitly forbids the AI from displaying, echoing, or discussing token values in any part of the conversation.
Audit Metadata