cloudbase-wechat-integration
Pass
Audited by Gen Agent Trust Hub on Aug 16, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external data that could potentially contain malicious instructions, though it includes several mitigation instructions.
- Ingestion points: The skill provides logic to ingest external data including payment descriptions, order IDs (
out_trade_no), and WeChat OAuth authorization codes (code) acrossreferences/mini-program-pay.md,references/native-qr-pay.md, andreferences/official-account-oauth.md. - Boundary markers: The instructions repeatedly warn the agent and the developer to "Do not trust client-provided amount without server-side validation" and to use official query results rather than client success messages.
- Capability inventory: The skill facilitates network operations via
wx.cloud.callHTTPFunctionand standardfetchcalls to process this data. - Sanitization: The skill explicitly mandates server-side validation of amount and product data before payment creation, which serves as a primary defense against malformed or malicious data injection.
Audit Metadata