Skills
Navigate
skills/soia-team/soia-open-skills/soia-pkm-publish-wechat-draft/Gen Agent Trust Hub

soia-pkm-publish-wechat-draft

Pass

Audited by Gen Agent Trust Hub on Jul 16, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The scripts/publish.py script executes a local Python script scripts/render.py using subprocess.run. This is a controlled internal operation within the skill's transformation pipeline and does not pose a command injection risk.
  • [SAFE]: The skill follows security best practices for credential management by instructing the user to store WeChat API keys in a local configuration file (config.yml) that is outside the skill repository and vault.
  • [SAFE]: Technical instructions regarding IP whitelisting and API configuration are provided to guide the user through manual setup, ensuring transparency and user control over network operations.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 16, 2026, 08:22 AM
Security Audit — agent-trust-hub — soia-pkm-publish-wechat-draft