skills/wmy2981/skills/enterprise-info/Gen Agent Trust Hub

enterprise-info

Pass

Audited by Gen Agent Trust Hub on Aug 8, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The script scripts/query.py executes the chcp 65001 command via subprocess.run on Windows environments. This is a standard procedure to enable UTF-8 character support in the Windows command prompt and does not incorporate any user-supplied input into the shell command.
  • [EXTERNAL_DOWNLOADS]: The skill makes network requests to https://cn.apihz.cn/api/shiming/qyinfo.php to fetch business registry information. This behavior is documented, aligns with the skill's primary purpose, and uses the official domain of the service provider.
  • [CREDENTIALS_UNSAFE]: The skill requires API authentication via the JKHZ_ID and JKHZ_KEY environment variables. It follows security best practices by loading these from a .env file in the user's home directory (~/.wmyskills/.env) rather than hardcoding credentials in the scripts.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 8, 2026, 02:07 AM
Security Audit — agent-trust-hub — enterprise-info