wechat-article-formatter
Pass
Audited by Gen Agent Trust Hub on Aug 13, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: Employs shell commands via
curlto interact with the WeChat Official Account API and the bm.md rendering service for article processing. - [DATA_EXPOSURE]: Accesses
~/.envto read and manage WeChat API credentials. This is documented as the standard method for credential storage within the skill's workflow. - [EXTERNAL_DOWNLOADS]: Retrieves images from remote URLs specified in markdown files to upload them to the WeChat CDN, as part of the article preparation process.
- [INDIRECT_PROMPT_INJECTION]: Processes user-provided markdown and metadata files. Ingestion points: Markdown files (e.g.,
wechat.md) and directory metadata (promotion.md). Boundary markers: None identified. Capability inventory: File system access (read/write) and network operations viacurl. Sanitization: Implements length validation for the article digest field.
Audit Metadata