wechat-article-search
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted article titles and summaries from external web searches and returns them to the agent. This constitutes an indirect prompt injection surface if the source content contains malicious instructions designed to manipulate the LLM's behavior.
- Ingestion points:
scripts/search_wechat.jsperforms HTTPS requests to Sogou and WeChat domains to retrieve article metadata. - Boundary markers: The results are returned as a structured JSON object, providing a data boundary for the agent's context.
- Capability inventory: The skill has network access (HTTPS) and local file writing capabilities (via the
-oCLI argument). - Sanitization: The script parses and trims the content but does not perform specialized sanitization to prevent LLM prompt injection attacks.
- [EXTERNAL_DOWNLOADS]: The skill requires the
cheeriopackage, which is a well-known, established library for HTML manipulation in the Node.js ecosystem. The installation instructions follow standard package management practices.
Audit Metadata