wecomcli-manage-doc
Pass
Audited by Gen Agent Trust Hub on Apr 1, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the wecom-cli binary to interact with the WeCom document management system. This is the primary and intended mechanism for the skill's functionality.
- [SAFE]: The skill interacts with external document data, which constitutes a surface for indirect prompt injection. However, this is inherent to the document management use case, and no malicious patterns were identified. 1. Ingestion points: Document content retrieved through the get_doc_content tool (references/api-export-document.md). 2. Boundary markers: Not explicitly defined in the instructions. 3. Capability inventory: The skill can modify documents via the edit_doc_content tool (references/api-edit-doc-content.md). 4. Sanitization: Not explicitly mentioned, as the tool is designed to handle raw Markdown content.
Audit Metadata