wecomcli-media
Pass
Audited by Gen Agent Trust Hub on Aug 17, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes shell commands using the wecom-cli utility to manage media files.
- Evidence: The skill defines commands for
wecom-cli media downloadandwecom-cli media uploadto perform its primary tasks. - Context: This is the intended primary behavior of the skill and is facilitated through a tool provided by the vendor (wecomteam).
- [SAFE]: The skill implements specific constraints to prevent data exposure and ensure tool integrity.
- Evidence: Instructions explicitly state that internal identifiers like
media_idand localfile_pathmust not be shown to the user. - Evidence: The skill forbids using generic tools like
curlorpythonto bypass the CLI and prohibits guessing file paths or IDs.
Audit Metadata