wechat-2d-render
Warn
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The script
scripts/render_wechat_2d.shclones an external repository (https://github.com/sxhzju/wechat-2d.git) and proceeds to execute its contents. Specifically, it runspnpm install, which can trigger post-install scripts, andpnpm run remotion:render, which executes project-specific build and rendering logic. - [EXTERNAL_DOWNLOADS]: The skill relies on
git cloneto fetch the primary application logic from a third-party GitHub repository. It also usespnpmto download and install numerous Node.js dependencies from public registries during the setup process. - [COMMAND_EXECUTION]: The workflow involves multiple shell command executions, including
corepack enable pnpm,gitoperations, andpnpmscript runners. These commands are used to manage the environment and drive the rendering engine. - [INDIRECT_PROMPT_INJECTION]:
- Ingestion points: The skill ingests a user-provided
props_file(JSON) and content from the externalwechat-2drepository during the render process. - Boundary markers: No explicit delimiters or instructions are used to prevent the agent from interpreting data inside the
props_fileor the external repository as instructions. - Capability inventory: The skill has the capability to write to the file system (
mkdir,git clone), execute shell commands, and perform network operations viagitandpnpm. - Sanitization: The script uses standard shell quoting for variables, but does not perform deep validation or sanitization of the JSON properties passed to the Remotion engine.
Audit Metadata