miniprogram-development
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is focused on standard development workflows for WeChat Mini Programs and follows security best practices.
- [COMMAND_EXECUTION]: The skill utilizes legitimate CLI tools including
wechatide(the official WeChat Developer Tools CLI) andmcporterfor local project operations such as compiling, debugging, and cloud function deployment. - [EXTERNAL_DOWNLOADS]: The skill references official WeChat domains (
developers.weixin.qq.com) for downloading the Nightly version of the developer tools. It also utilizes the@cloudbase/cloudbase-mcppackage vianpx, which is an official tool provided by the skill's author,tencentcloudbase. - [CREDENTIALS_SAFE]: The documentation explicitly advises users against hardcoding sensitive credentials like Secret IDs or Secret Keys in configuration files, recommending secure device-code authentication instead.
- [INDIRECT_PROMPT_INJECTION]: While the skill processes mini program project files and tool outputs, it references external safety protocols (Change Safety Protocol, Deployment Gate) to manage risks associated with code modifications and deployments.
Audit Metadata