wildix-get-unread-messages
Pass
Audited by Gen Agent Trust Hub on May 13, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a local bash script (
scripts/get-unread.sh) which uses a Python heredoc to process JSON data and fetch channel details in batches. - [EXTERNAL_DOWNLOADS]: Communicates with official vendor APIs at
api.x-bees.comandchat.wildix-chat.comto exchange tokens and retrieve message counts and content. - [SAFE]: Includes explicit safety instructions in
SKILL.mddirecting the agent to treat fetched message content as untrusted data, effectively mitigating potential indirect prompt injection attacks from chat history. - [SAFE]: Peer skill installation and authentication logic use the vendor's official repositories and standard environment-based secret management.
Audit Metadata