configure

Pass

Audited by Gen Agent Trust Hub on Mar 22, 2026

Risk Level: SAFECREDENTIALS_UNSAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [CREDENTIALS_UNSAFE]: The skill reads and manages the ~/.claude/channels/weixin/credentials.json file, which stores sensitive WeChat authentication tokens and account identifiers.
  • [COMMAND_EXECUTION]: Executes internal plugin scripts login-qr.ts and login-poll.ts using the bun runtime to perform the WeChat login handshake and status polling.
  • [EXTERNAL_DOWNLOADS]: Uses npx qrcode-terminal to generate login QR codes, which involves fetching and running code from the npm registry.
  • [EXTERNAL_DOWNLOADS]: Performs network requests to https://ilinkai.weixin.qq.com/ for the purpose of initiating and verifying the WeChat login process. This is an official domain for WeChat iLink services.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 22, 2026, 08:01 AM