douyin-ai-feed
Pass
Audited by Gen Agent Trust Hub on Aug 29, 2026
Risk Level: SAFEPERSISTENCECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [PERSISTENCE]: The script
scripts/fetch_douyin_ai.pyimplements a subscription feature that installs a daily task at 16:00 usinglaunchctlon macOS (creating a.plistin~/Library/LaunchAgents) orcrontabon Linux. This persistence mechanism is a core feature described in the skill's documentation and is only activated when the user explicitly runs the script with the--subscribeflag.\n- [COMMAND_EXECUTION]: The skill usessubprocess.runto interact with system utilities. Specifically, it executes shell commands to manage the subscription schedules (launchctl,crontab) and to automatically open the generated HTML reports in the user's default browser usingopen(macOS) orxdg-open(Linux).\n- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from an external API, which could potentially contain malicious instructions. \n - Ingestion points: Metadata such as video titles and author names are retrieved from
https://redfox.hk/story/api/parseWork/queryDyAiMsgsinscripts/fetch_douyin_ai.py. \n - Boundary markers: Absent. Ingested data is formatted directly into terminal tables and HTML reports without explicit markers. \n
- Capability inventory: The skill possesses file-writing capabilities and can execute shell commands for system tasks. \n
- Sanitization: No evidence of HTML escaping or terminal control sequence filtering is present in the processing logic for external content.\n- [EXTERNAL_DOWNLOADS]: The skill communicates with an external API to fetch its content feed. \n
- Evidence:
requests.postcalls are made tohttps://redfox.hk/story/api/parseWork/queryDyAiMsgs. This endpoint is owned by the skill vendor (redfox-data) and is central to the tool's intended functionality.
Audit Metadata