weixin-channel-setup
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill guides the user to execute shell commands using the
qwenCLI tool (a vendor-owned resource) to configure settings and manage the WeChat channel service. These commands are standard administrative operations for the agent's functionality. - [INDIRECT_PROMPT_INJECTION]: By setting up a WeChat channel, the agent is exposed to external input which could contain malicious instructions (indirect prompt injection). The skill addresses this by recommending a
senderPolicyofallowlistand providing specific fields (allowedUsers) to restrict access to trusted individuals. This documentation helps the user mitigate potential injection risks from untrusted WeChat users. - [DATA_EXPOSURE]: The skill mentions the location of sensitive authentication tokens in
~/.qwen/channels/weixin/account.json. It includes clear security instructions for the user to protect this file and warns against sharing its contents, following security best practices for credential management.
Audit Metadata