wechat-miniprogram
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The documentation in
references/framework.mddescribes the installation ofminiprogram-simulate, which is the standard official utility for unit testing WeChat Mini Programs, from the npm registry. - [INDIRECT_PROMPT_INJECTION]: This skill provides instructions for a development framework that processes user-controlled files (WXML, JS). This constitutes an attack surface for indirect prompt injection if the agent uses these instructions to generate or analyze code from untrusted sources without proper boundaries.
- Ingestion points: Mini Program project files including
SKILL.mdexamples and the structure defined inreferences/getting_started.md. - Boundary markers: None explicitly defined in the provided documentation to differentiate between developer instructions and potentially untrusted code content.
- Capability inventory: The skill documents powerful APIs for network communication (
wx.request), file system access, and cloud function execution as detailed inreferences/api.mdandreferences/cloud.md. - Sanitization: Not applicable for this documentation-only skill, which serves as a technical reference.
Audit Metadata