jimureport
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The utility script
scripts/jimureport_gen.pyinvokessubprocess.runto callscripts/jimureport_creator.py. This behavior is localized within the skill's own directory structure and is used purely for internal workflow orchestration. - [CREDENTIALS_UNSAFE]: The file
scripts/jimureport_core.pycontains a hardcoded stringdd05f1c54d63749eda95f9fa6d49v442aas a fallback signing secret. This is a well-known default value for the JimuReport platform's request authentication and does not represent an exposure of sensitive user credentials. - [SAFE]: The skill communicates exclusively with vendor-controlled domains (e.g.,
api.jeecg.com) for legitimate reporting functions. - [SAFE]: Clear instructions are provided within
SKILL.mdto ensure that sensitive information like database passwords are requested directly from the user rather than being stored or retrieved from the agent's long-term memory.
Audit Metadata