miniprogram-automation
Pass
Audited by Gen Agent Trust Hub on Mar 21, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
node:child_processmodule'sspawnSyncfunction to execute the WeChat DevTools CLI (cliorcli.bat). This is a necessary and standard procedure for enabling automation ports and managing the development tool environment. - [DATA_EXPOSURE]: The skill provides templates for taking screenshots of the mini-program simulator using
miniProgram.screenshot(). This is an expected feature for visual regression and E2E testing. - [PROMPT_INJECTION]: The skill sets up a surface for indirect prompt injection by listening to logs and exceptions generated by the mini-program under test.
- Ingestion points: Runtime console output and exceptions are ingested into the agent context via
miniProgram.on('console')andminiProgram.on('exception')inSKILL.md. - Boundary markers: No specific boundary markers or instructions are provided to the agent to ignore potentially malicious content within these logs.
- Capability inventory: The skill has access to command execution (
spawnSync) and file system operations (fs.mkdir,fs.writeFilevia the library's screenshot capability). - Sanitization: Log data is processed without sanitization before being evaluated by the agent.
Audit Metadata