tianqi
Pass
Audited by Gen Agent Trust Hub on Mar 4, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill performs HTTP GET requests to external weather APIs. The domain 'weather.com.cn' is decoded from Base64 in
scripts/curl.shand used as the target for data fetching. - [COMMAND_EXECUTION]: The skill uses a local shell script (
scripts/curl.sh) to wrapcurlcommands. This is used to handle dynamic parameters like domain resolution and timestamps (_TIME_) before making network requests.
Audit Metadata