doubao-websearch
Pass
Audited by Gen Agent Trust Hub on Jun 24, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires the
requestsPython library for making API calls. This is a standard and safe dependency. - [COMMAND_EXECUTION]: The skill executes a local Python script (
scripts/doubao_search.py) to handle the API interaction logic. The script processes user input as a literal string within a JSON payload, effectively preventing command injection vulnerabilities. - [DATA_EXFILTRATION]: The skill transmits user-provided search queries to
redfox.hk. This is the core intended functionality of the skill and is performed over an encrypted channel using an API key managed via environment variables. - [SAFE]: No malicious patterns, obfuscation, or unauthorized data access were detected. The implementation is transparent, and the domain used (
redfox.hk) is the official infrastructure for the skill's author,redfox-data.
Audit Metadata