wechat-article-aggregator
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill performs network requests to
down.mptext.topto retrieve article lists and full HTML content. This behavior is consistent with the skill's primary stated purpose of article aggregation. - [INDIRECT_PROMPT_INJECTION]: The skill ingests external content from the web, which creates a potential surface for indirect prompt injection.
- Ingestion points: Article HTML is downloaded from the
down.mptext.topAPI inscripts/fetch_articles.py. - Boundary markers: No specific boundary markers or delimiters are added to the parsed content.
- Capability inventory: The skill has the ability to read from the network and write files to the local filesystem.
- Sanitization: The script includes a
ContentExtractorclass that filters outscript,style, andnoscripttags, and optionally useshtml2textfor Markdown conversion, which significantly reduces the risk of active content injection. - [COMMAND_EXECUTION]: The tool uses the
pathliblibrary for filesystem operations and includes asafe_filenamefunction that sanitizes article titles by removing special characters and limiting length, mitigating risks such as directory traversal.
Audit Metadata