Skills
Navigate
skills/tuihou123321/wechat-channels-skills/wechat-channels-profile/Gen Agent Trust Hub

wechat-channels-profile

Pass

Audited by Gen Agent Trust Hub on Jul 2, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes child_process.spawnSync to invoke the system curl utility for networking operations.
  • [EXTERNAL_DOWNLOADS]: Communicates with https://mcp.tikhub.io to retrieve profile and video data from WeChat Channels.
  • [CREDENTIALS_UNSAFE]: Reads authentication tokens from environment variables or the configuration file located at ~/.codex/config.toml.
  • [PROMPT_INJECTION]: Processes data from an external API, creating a surface for indirect prompt injection. The skill mitigates this by applying a stripTags function to sanitize descriptions and titles before they are presented to the agent context.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 2, 2026, 11:50 AM