wechat-styler

Pass

Audited by Gen Agent Trust Hub on Oct 23, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill invokes several external CLI tools for legitimate functional purposes:
  • open: Automatically opens the generated HTML file in the default browser for preview.
  • opencli: Used for browser automation to inject content directly into the WeChat Official Account editor.
  • sips (macOS): Resizes and optimizes JPEG images before upload.
  • ffmpeg: Compresses animated GIF images to meet WeChat's file size limits.
  • git: Used within test suites to verify whitespace cleanliness in generated files.
  • [EXTERNAL_DOWNLOADS]: The skill performs network operations to support its core workflows:
  • Fetches brand-specific GIF and SVG assets from a Tencent Cloud COS bucket (myqcloud.com), which is a well-known service.
  • Uses fetch to download remote images referenced in the source Markdown to perform local optimization and re-uploading via a local PicGo server.
  • [DYNAMIC_EXECUTION]: To bypass WeChat editor restrictions and ensure correct formatting (such as preserving SVG animations), the skill generates JavaScript snippets that are evaluated in the browser context using opencli eval. This process includes Base64-encoding the article content and decoding it within the page using atob and TextDecoder before setting innerHTML to update the editor content.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 23, 2026, 06:12 PM