wechat-tech-writer
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE] (SAFE): No malicious behavior detected. The skill provides legitimate functionality for generating images via established AI provider APIs.
- [CREDENTIALS_UNSAFE] (SAFE): The documentation correctly instructs users to use environment variables for API keys rather than hardcoding them. Placeholders like 'your-gemini-api-key-here' are used in examples, which is safe.
- [DATA_EXFILTRATION] (SAFE): Network requests are directed only to legitimate, whitelisted API endpoints (api.openai.com and Google GenAI endpoints). No unauthorized data transmission was found.
- [COMMAND_EXECUTION] (SAFE): The provided Python scripts perform standard operations for image generation and local file saving. While they include hardcoded local Windows paths (e.g., G:\git_pull...), these are likely for a specific developer environment and do not pose a security threat.
- [EXTERNAL_DOWNLOADS] (SAFE): The documentation suggests installing 'google-genai' and 'requests', both of which are standard, trusted libraries for the intended task. No suspicious third-party downloads are present.
Audit Metadata