enterprise-info
Pass
Audited by Gen Agent Trust Hub on Aug 8, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/query.pyexecutes thechcp 65001command viasubprocess.runon Windows environments. This is a standard procedure to enable UTF-8 character support in the Windows command prompt and does not incorporate any user-supplied input into the shell command. - [EXTERNAL_DOWNLOADS]: The skill makes network requests to
https://cn.apihz.cn/api/shiming/qyinfo.phpto fetch business registry information. This behavior is documented, aligns with the skill's primary purpose, and uses the official domain of the service provider. - [CREDENTIALS_UNSAFE]: The skill requires API authentication via the
JKHZ_IDandJKHZ_KEYenvironment variables. It follows security best practices by loading these from a.envfile in the user's home directory (~/.wmyskills/.env) rather than hardcoding credentials in the scripts.
Audit Metadata