wechat-channels-download
Pass
Audited by Gen Agent Trust Hub on Jul 2, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The script uses
spawnSyncto executecurlfor API communication and video downloading. The arguments are passed as an array, which is a secure practice to prevent shell injection. - [COMMAND_EXECUTION]: Utilizes
ffprobeandfilecommands to validate downloaded media files and extract metadata such as resolution and duration. - [EXTERNAL_DOWNLOADS]: Fetches search results and video content from
mcp.tikhub.ioand remote media URLs. It employs hardcoded IP addresses for domain resolution to ensure connection stability. - [SAFE]: Accesses
~/.codex/config.tomlto retrieve the Authorization Bearer token required for the TikHub service. This is an expected behavior for skills operating within the intended environment.
Audit Metadata