wechatpay-product-coupon
Pass
Audited by Gen Agent Trust Hub on Apr 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCREDENTIALS_UNSAFE
Full Analysis
- [SAFE]: The skill is fundamentally a documentation and template repository. It contains high-level constraints ('全局交互规范') that restrict the agent to retrieval-only operations, explicitly prohibiting the modification of user files or the independent generation of cryptographic logic from scratch.
- [EXTERNAL_DOWNLOADS]: The provided code samples and documentation point exclusively to official and well-known domains managed by WeChat Pay (Tencent), such as api.mch.weixin.qq.com and pay.weixin.qq.com. These are necessary for the skill's stated purpose of facilitating API integration.
- [CREDENTIALS_UNSAFE]: The skill handles authentication requirements by providing templates with clear placeholders (e.g., 'xxxxxxxx', '/path/to/apiclient_key.pem') for sensitive parameters. It includes educational content instructing users on how to securely obtain and manage their own API keys and certificates through official platforms.
Audit Metadata