wecom-notify
Pass
Audited by Gen Agent Trust Hub on Oct 10, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill facilitates communication with the well-known WeCom (Tencent) API at
qyapi.weixin.qq.comfor its primary purpose of sending notifications. - [SAFE]: Sensitive configuration data, such as API secrets and agent IDs, are managed via a local JSON file (
~/.openclaw/openclaw.json), which follows standard secret management practices. - [SAFE]: The implementation relies exclusively on the Python standard library, avoiding third-party package dependencies and remote code execution risks.
- [SAFE]: The documented use of a private proxy for API routing is consistent with the skill's intended operational environment.
Audit Metadata