ray-wechat
Pass
Audited by Gen Agent Trust Hub on Jul 30, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/wechat_egress.pyinvokes the systemsshcommand viasubprocess.Popento create a SOCKS5 proxy tunnel, which is a functional requirement for maintaining a fixed IP address during WeChat API interactions. - [COMMAND_EXECUTION]: The skill uses
subprocess.runto execute its internal validation scriptscripts/prepare_article.py, ensuring the integrity of the article content before it is processed. - [EXTERNAL_DOWNLOADS]: Network requests are made to the official WeChat API endpoints and
api.ipify.orgfor IP verification. Additionally, the skill establishes outbound SSH connections as specified in its egress configuration. - [SAFE]: Credentials for the WeChat API are managed through local configuration files or environment variables, with built-in logic to redact these secrets from logs and error messages.
Audit Metadata