wechat-publisher
Pass
Audited by Gen Agent Trust Hub on Jul 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements a security-first approach by including a validation script (scripts/validate_article.py) that scans articles for credentials, private keys, and local machine paths before publication.
- [COMMAND_EXECUTION]: Local bash scripts are used to coordinate the publishing workflow; these scripts follow best practices for variable quoting and error handling.
- [EXTERNAL_DOWNLOADS]: The skill utilizes the @wenyan-md/cli package, a standard tool for WeChat publishing, installed via the official NPM registry.
- [SAFE]: The skill safely handles authentication by requiring credentials to be provided via environment variables rather than being hardcoded or stored in the repository.
Audit Metadata