wechat-10w-hot
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches WeChat article data from the developer's official API endpoint (
redfox.hk). This is a legitimate functional requirement for the skill. - [COMMAND_EXECUTION]: Runs local Python scripts (
fetch_hot_articles.pyandgenerate_hot_html.py) to process data and generate HTML reports. These scripts exclusively use Python standard libraries. - [INDIRECT_PROMPT_INJECTION]: The skill ingests external article data (titles and summaries) from a vendor API. This represents an ingestion surface, but the data is structured (JSON) and used for reporting without granting the content access to dangerous system capabilities.
Audit Metadata