wechat-search
Pass
Audited by Gen Agent Trust Hub on Mar 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user or agent to install the
miku_aiPython package usingpip install miku_ai --break-system-packages. This is an external dependency from an unverified third-party source. - [COMMAND_EXECUTION]: The skill uses
python3 -cto execute an inline asynchronous Python script that imports themiku_ailibrary and performs the article search. This involves running code that relies on external dependencies and user-provided keywords. - [PROMPT_INJECTION]: The skill is vulnerable to indirect prompt injection (Category 8).
- Ingestion points: Data is ingested from the
get_wexin_articlefunction, which fetches titles and digests from external WeChat articles. - Boundary markers: There are no boundary markers or instructions to ignore embedded commands within the fetched article content.
- Capability inventory: The skill uses
asyncio.runandpython3subprocess execution to run the search logic. - Sanitization: The fetched article metadata (title, digest) is printed directly to the output without sanitization or escaping, which could lead to an agent following instructions hidden in article summaries.
Audit Metadata