oschina
Pass
Audited by Gen Agent Trust Hub on Aug 24, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements a secure 'Bring Your Own Cookie' (BYOC) pattern, where authentication is handled through a connection-injected environment variable rather than hardcoded secrets.
- [CREDENTIALS_SAFE]: The Python script includes a custom redirect handler (
_NoRedirect) specifically designed to prevent the OSChina login cookies from being sent to external domains if a redirect occurs. It also validates that cookies are only sent to hostnames matching the cookie's domain. - [COMMAND_EXECUTION]: The skill uses a gated execution model for writing data. The
draftcommand defaults to a dry-run mode and requires a specific--confirmflag as the final argument to perform the actual API request, preventing accidental or unintended draft creation. - [REMOTE_CODE_EXECUTION]: The logic is contained within a standalone Python script using only the standard library (
urllib). No external dependencies are downloaded or executed.
Audit Metadata