chanjing-credentials-guard
Pass
Audited by Gen Agent Trust Hub on Mar 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns or security vulnerabilities were detected in the skill code or instructions.
- [COMMAND_EXECUTION]: The skill utilizes
subprocess.runto call standard system utilities (such asopen,start, andxdg-open) for the purpose of launching the user's default web browser to the service's official login page. - [DATA_EXFILTRATION]: Local storage of credentials in
~/.chanjing/credentials.jsonis protected with restrictive file permissions (chmod 600). The skill transmits credentials solely to the official vendor domain (open-api.chanjing.cc) to perform necessary token exchange operations. - [SAFE]: The execution flow is transparent and focuses on guiding the user through credential setup without attempting to bypass safety filters or perform unauthorized actions.
Audit Metadata