wechat-mp-batch-exporter
Pass
Audited by Gen Agent Trust Hub on Jul 10, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the Python
subprocessmodule to perform system and local tool operations.scripts/doctor.pyexecutesnetworksetupon macOS to retrieve network service lists and proxy configurations (-listallnetworkservices,-getwebproxy,-getsecurewebproxy).scripts/start_wxdown_service.pyruns a local service by executing a Python script located in a user-provided directory (--wxdown-dir).- [EXTERNAL_DOWNLOADS]: Thescripts/download_urls.pyscript fetches article data from a remote endpoint (https://down.mptext.top/api/public/v1/download). This is the default API used for article extraction.- [PROMPT_INJECTION]: The skill ingests and processes untrusted article content from the web, creating a potential surface for indirect prompt injection. Ingestion points:scripts/download_urls.pysaves article bodies (Markdown/HTML/JSON) from the network to the local filesystem. Boundary markers: Absent. Capability inventory: The skill can execute shell commands (subprocessindoctor.py,start_wxdown_service.py) and perform network requests (urllib.requestindownload_urls.py). Sanitization:scripts/download_urls.pysanitizes filenames using regex, but the article content itself is processed without specialized filtering for malicious instructions.
Audit Metadata