douyin-kol-search
Pass
Audited by Gen Agent Trust Hub on May 11, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill communicates with a third-party domain (ai-skills.ai) that is explicitly disclosed in the
SKILL.mdfrontmatter and thereferences/skill.jsonmetadata. - [SAFE]: Sensitive information handled by the skill (specifically the
AISKILLS_API_KEY) is managed through environment variables rather than hardcoding, following secure development practices. - [SAFE]: The script
scripts/run.pyis a straightforward API wrapper that uses standard Python libraries (urllib,ssl,argparse) to process user parameters and send them to the authorized endpoint. - [SAFE]: No obfuscation, prompt injection attempts, or unauthorized local file system access were detected in the provided files.
- [SAFE]: The optional dependency on the
certifipackage is used for standard SSL certificate verification, which is a security best practice for network communications.
Audit Metadata