WeChat Cover

• Risk level: Low
• Analyzed: Apr 4, 2026, 3:14 PM
• Findings: 0
• Version: 1.0.0

Overview

The skill's code, documentation, and requested environment variables are generally consistent with its stated purpose of generating WeChat cover images using OpenAI/Gemini image APIs; no signs of broad or unrelated access requests were found, though a few small documentation/code mismatches merit attention.

This skill appears to do what it claims: it builds prompts locally, sends them to the configured image-generation provider, and crops the returned image for WeChat. Before installing or running it: 1) Be prepared to provide an API key for the image provider you intend to use (these keys will be sent to the provider when generating images). 2) Confirm how you will run the script (SKILL.md shows `uv run` — ensure you have the expected runner or adapt to your Python environment). 3) Note that the OpenAI client implementation requires a base_url (the included settings.json provides a default api.openai.com base_url); if you remove settings.json or expect a different override order, you may encounter runtime errors. 4) Review the remainder of scripts/generate.py (it was truncated in the provided preview) to verify there are no unexpected file reads/writes beyond settings.json and the output image. 5) Run in an isolated virtualenv and avoid putting sensitive data (personal identifiers, private content) into prompts since prompts and generated images are transmitted to the external provider. If you want additional assurance, share the full generate.py content (the truncated portion) for review.