weibo-webmcp
Pass
Audited by Gen Agent Trust Hub on Mar 29, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [PROMPT_INJECTION]: The skill ingests untrusted content from Weibo, creating a surface for indirect prompt injection.
- Ingestion points: The skill fetches data from Weibo using
timeline.home.list,post.get, andsearch.weibo(SKILL.md). - Boundary markers: No explicit delimiters or instructions to ignore embedded commands are provided to the agent for the fetched data.
- Capability inventory: The skill enables write operations such as
post.create,comment.create, andarticle.publishMarkdown(SKILL.md). - Sanitization: No sanitization or content validation mechanisms are documented for the ingested content.
- [COMMAND_EXECUTION]: The skill uses local CLI tools and shell scripts for its operational logic.
- Evidence: All core operations are invoked via
weibo-webmcp-cli(SKILL.md). - Evidence: Symlink management is handled by
scripts/ensure-links.sh. - [EXTERNAL_DOWNLOADS]: The skill requires external binaries for its browser automation component.
- Evidence: Prerequisites in
SKILL.mdspecify the use ofnpx playwright installto set up the necessary environment.
Audit Metadata