skills/aslanyushengjiang-coder/shengjiang-skills/shengjiang-social-media-research/Gen Agent Trust Hub
shengjiang-social-media-research
Pass
Audited by Gen Agent Trust Hub on Jul 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses a Python script (
scripts/tikhub_request.py) to interact with the TikHub API. The script is designed with security in mind: it retrieves theTIKHUB_API_KEYfrom environment variables rather than hardcoded strings or user input, and it includes aredact_urlfunction to prevent sensitive tokens from appearing in logs or terminal output. - [EXTERNAL_DOWNLOADS]: The skill references external tools and services, specifically the TikHub API and the 'Social Media Assistant' (socialext.com) browser extension. The documentation neutrally directs users to the official vendor pages for these tools, which is expected behavior for a research-oriented skill. The instructions emphasize that installation and credential management are the user's responsibility.
- [DATA_EXFILTRATION]: While the skill communicates with an external API (api.tikhub.io), it is for the explicit purpose of social media data collection as requested by the user. The script follows best practices by using standard libraries (
urllib) and limiting headers to necessary authentication and content-type markers. - [SAFE]: The skill includes explicit warnings against sharing credentials, passwords, or cookies in the chat. It mandates a 'dry-run' and small-sample validation before performing any bulk operations, which helps users manage potential costs and verify data integrity without accidental data exposure.
Audit Metadata