douyin-daily-hot

Pass

Audited by Gen Agent Trust Hub on Aug 15, 2026

Risk Level: SAFE
Full Analysis
  • [DATA_EXPOSURE_AND_EXFILTRATION]: The skill requires the REDFOX_API_KEY environment variable to authenticate requests to the vendor's API. This is a standard and recommended practice for managing sensitive credentials without hardcoding them in the source code.- [EXTERNAL_DOWNLOADS]: The Python script connects to https://redfox.hk/story/api/dy/search/likesRank to retrieve ranking data. This network activity is documented, essential to the skill's primary function, and targets the official domain associated with the skill author.- [INDIRECT_PROMPT_INJECTION]: The skill exhibits good security hygiene when handling external data. Ingestion points: Ranking data (titles, author names) retrieved from the API in douyin_daily_hot.py. Boundary markers: Output is constrained to Markdown table structures. Capability inventory: The skill is limited to performing network GET/POST requests and printing results; it has no file system write or shell execution capabilities. Sanitization: The script includes explicit character replacement (e.g., replacing | with and [ with ) in video titles to prevent content from breaking the Markdown table structure or causing unexpected UI behavior.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 15, 2026, 09:46 AM
Security Audit — agent-trust-hub — douyin-daily-hot