wechat-mp-smart-publish
Pass
Audited by Gen Agent Trust Hub on Apr 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill includes Python scripts (
publish.py,api_publish.py) that perform the intended automation tasks like API requests and browser interactions via Playwright. - [EXTERNAL_DOWNLOADS]: The publish.py script instructs the user to install the Playwright framework and associated browser binaries. These downloads originate from well-known, trusted sources and are required for the skill's browser automation functionality.
- [SAFE]: The skill manages sensitive data such as API keys and session cookies by storing them in local configuration files in the user's home directory. This is standard practice for maintaining persistent sessions in automation tools. The presence of a sample identifier in the documentation does not constitute a security risk.
Audit Metadata