skyline-overview
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides legitimate technical documentation and configuration examples for the WeChat Mini Program Skyline rendering engine. All external references are internal documentation paths or standard development practices.
- [COMMAND_EXECUTION]: The skill includes shell command examples such as
npm install weui-miniprogram. These are standard package management instructions for developers and do not constitute malicious command injection. - [DYNAMIC_EXECUTION]: The documentation mentions 'Worklet' animations and
applyAnimatedStyle, which involve runtime execution on a rendering thread. These are documented platform features for the Skyline engine and are used here for instructional purposes rather than arbitrary code execution. - [INDIRECT_PROMPT_INJECTION]: While the skill describes processing data for rendering (e.g., list views and components), it lacks ingestion points for untrusted external data that would facilitate a prompt injection attack. The instructions focus on static configuration and API usage.
Audit Metadata