wecomcli-disk
Pass
Audited by Gen Agent Trust Hub on Aug 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill follows secure practices by explicitly forbidding the use of shell or terminal commands for tool execution, requiring all operations to go through the specialized wecom-cli tool.
- [COMMAND_EXECUTION]: All file operations are performed via a controlled CLI tool with specific JSON-encoded arguments. This prevents arbitrary command injection.
- [EXTERNAL_DOWNLOADS]: File downloads are restricted to Enterprise WeChat's official micro-disk domain (drive.weixin.qq.com), which is consistent with the skill's purpose and the author's identity.
- [DATA_EXFILTRATION]: The skill manages file transfers within the authenticated Enterprise WeChat ecosystem. No suspicious network activities or unauthorized data transfers to third-party domains were found.
- [PROMPT_INJECTION]: The instructions are instructional and contain no patterns designed to bypass agent safety filters or override system constraints.
Audit Metadata