Security audit
Security checks for vulnerabilities and agentic risk
This skill is a disclosed Qinghu API workflow for analyzing public WeChat Channels data, with manageable cautions around API-token use and automatic spreadsheet export.
Install only if you intend to use Qinghu's API for WeChat Channels analytics. Expect to provide or expose a Qinghu API token, approve API tool calls before they run, potentially incur Qinghu point charges, and receive exported local files for larger datasets.
The listed trigger examples include broad everyday requests like “这个视频号做得怎么样” and “看看这条视频号作品的评论区在说什么”, which could match ordinary conversational analysis requests without clearly constraining when this skill should activate instead of another analytics skill. The section provides examples but no negative examples or exclusion conditions to narrow activation scope.
The skill directs automatic export of large result sets to files by default, including use of cached local file paths, without requiring explicit user consent at the time of file creation or clarifying where data is written. In an agent environment, this can create unintended local persistence of potentially sensitive analytics data, increase exposure to cross-tool data leakage, and surprise users who did not authorize filesystem writes.
No suspicious patterns detected.
