wechat-mp
Pass
Audited by Gen Agent Trust Hub on Aug 13, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill employs a bash wrapper script (
scripts/wechat-mp) to manage the article workflow, perform environment diagnostics, and coordinate Python-based helpers. It includes a mechanism to source local configuration files, using shell-safe input handling to prevent injection. - [EXTERNAL_DOWNLOADS]: Interacts with the official WeChat Official Account API (
https://api.weixin.qq.com) to manage article drafts and media. These network operations are performed using Python's standardurlliblibrary and are limited to the skill's documented purpose. - [SAFE]: Implements secure credential management by allowing users to store WeChat API keys in local configuration files. These files are stored in dedicated data directories and are protected with restricted filesystem permissions (
chmod 600). - [SAFE]: Supports modular integration with peer skills (
tzai-imageandlark-push) by dynamically searching for their executables in standard agent installation directories. This allows for suite functionality without introducing unverified external dependencies.
Audit Metadata