laohan-xiazai
Fail
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: HIGHPRIVILEGE_ESCALATIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [PRIVILEGE_ESCALATION]: The script 'scripts/wx-video-download.sh' installs a root certificate ('SunnyNet') into the system keychain using 'sudo security add-trusted-cert', which allows the application to intercept and potentially modify all HTTPS traffic on the machine.
- [COMMAND_EXECUTION]: The script 'scripts/wx-video-download.sh' downloads an external binary and executes it as a background process with root privileges using 'sudo nohup'.
- [EXTERNAL_DOWNLOADS]: The skill fetches a binary ZIP from a GitHub repository ('ltaoo/wx_channels_download') at runtime, extracts it, and executes the binary with elevated permissions.
- [DATA_EXFILTRATION]: The skill includes instructions to retrieve and search through the user's local Chrome and Edge browser history and bookmarks via the 'find-url.mjs' script, exposing sensitive user data.
- [INDIRECT_PROMPT_INJECTION]: The skill fetches and processes content from over 30 external platforms and user-provided URLs. Ingestion points: Social media posts and arbitrary web pages. Boundary markers: None present. Capability inventory: Shell command execution, root CA installation, and root-level binary execution. Sanitization: No explicit content filtering or sanitization is implemented.
Recommendations
- AI detected serious security threats
Audit Metadata