configure
Pass
Audited by Gen Agent Trust Hub on Mar 22, 2026
Risk Level: SAFECREDENTIALS_UNSAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [CREDENTIALS_UNSAFE]: The skill reads and manages the
~/.claude/channels/weixin/credentials.jsonfile, which stores sensitive WeChat authentication tokens and account identifiers. - [COMMAND_EXECUTION]: Executes internal plugin scripts
login-qr.tsandlogin-poll.tsusing thebunruntime to perform the WeChat login handshake and status polling. - [EXTERNAL_DOWNLOADS]: Uses
npx qrcode-terminalto generate login QR codes, which involves fetching and running code from the npm registry. - [EXTERNAL_DOWNLOADS]: Performs network requests to
https://ilinkai.weixin.qq.com/for the purpose of initiating and verifying the WeChat login process. This is an official domain for WeChat iLink services.
Audit Metadata