wps
Pass
Audited by Gen Agent Trust Hub on May 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches the 'kdocs-cli' tool from the official WPS Content Delivery Network.
- The setup scripts (
setup.sh,setup.ps1,setup.cjs) download platform-specific binaries fromhttps://wpsai.wpscdn.cn/skillhub/profor installation. - [REMOTE_CODE_EXECUTION]: Implements a self-update mechanism that downloads and extracts code archives.
- Instructions in
SKILL.mddirect the agent to download a ZIP file and replace the skill content when thecheck_skill_updatecommand indicates a new version is available. - [COMMAND_EXECUTION]: Extensive use of shell commands to interact with user documents.
- The skill uses
kdocs-clito perform high-privilege operations on cloud storage, including file deletion and sharing, but mandates user confirmation and credential safety practices.
Audit Metadata