douyin-kol-search

Pass

Audited by Gen Agent Trust Hub on May 11, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill communicates with a third-party domain (ai-skills.ai) that is explicitly disclosed in the SKILL.md frontmatter and the references/skill.json metadata.
  • [SAFE]: Sensitive information handled by the skill (specifically the AISKILLS_API_KEY) is managed through environment variables rather than hardcoding, following secure development practices.
  • [SAFE]: The script scripts/run.py is a straightforward API wrapper that uses standard Python libraries (urllib, ssl, argparse) to process user parameters and send them to the authorized endpoint.
  • [SAFE]: No obfuscation, prompt injection attempts, or unauthorized local file system access were detected in the provided files.
  • [SAFE]: The optional dependency on the certifi package is used for standard SSL certificate verification, which is a security best practice for network communications.
Audit Metadata
Risk Level
SAFE
Analyzed
May 11, 2026, 02:25 PM