wecomcli-contact
Pass
Audited by Gen Agent Trust Hub on Aug 18, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes a tool named
wecom-clito perform directory searches. It includes explicit security-focused instructions to use the tool's interface via JSON parameters and strictly forbids direct shell or terminal execution to prevent command injection risks. - [SAFE]: The data accessed by the skill (names, user IDs, and department information) is consistent with the intended purpose of searching a corporate directory. The author 'wecomteam' provides the tool for its own platform integration, and the skill follows best practices for tool interaction.
Audit Metadata