wecomcli-smartpage
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
wecom-clibinary for all document management tasks and instructs the agent to usecurlfor downloading images from WeCom CDN URLs during content analysis.- [EXTERNAL_DOWNLOADS]: As part of its document parsing workflow, the skill downloads image assets from WeCom's content delivery network (e.g.,w...qpic.cn) to the local environment.- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process content from external Smartpage documents, which are untrusted data sources. - Ingestion points: Document content is retrieved using the
smartpage pages getcommand as described inreferences/smartpage-edit.md. - Boundary markers: While the skill uses structural MDX tags for formatting, it lacks explicit safety delimiters to isolate ingested text from the agent's instructions.
- Capability inventory: The skill possesses capabilities for writing to the file system, modifying remote documents via
wecom-cli, and performing network operations viacurl. - Sanitization: The skill includes detailed safety guidelines in
SKILL.mdthat explicitly require the agent to block XSS patterns (like<script>orjavascript:), political sensitivities, and role-play injection attempts.- [DYNAMIC_EXECUTION]: The skill utilizes a domain-specific formula system (documented inreferences/formula-reference.md) that evaluates logic and performs operations likeADDRECORDandMODIFYRECORDSat runtime based on page控件 (controls) and document data.
Audit Metadata