yichen-wechat-windows-reader
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The test file
tests/test_snapshot_reader.pyusessubprocess.runto execute the CLI tool during automated testing. This is a standard development practice using fixed, local paths. - [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from user-supplied SQLite databases. It mitigates the risk of instructions embedded in chat content being executed by the AI by wrapping all outputs in
untrusted_snapshot_dataJSON markers and markdown code fences, accompanied by explicit instructions for the agent to treat the data as untrusted. - [EXTERNAL_DOWNLOADS]: The project requires the
zstandardPython package for decompressing database fields. The dependency is securely managed throughrequirements.lockwith mandatory hash verification and binary-only installation constraints, fetching from the official PyPI registry.
Audit Metadata