douyin-daily-hot
Pass
Audited by Gen Agent Trust Hub on Aug 15, 2026
Risk Level: SAFE
Full Analysis
- [DATA_EXPOSURE_AND_EXFILTRATION]: The skill requires the
REDFOX_API_KEYenvironment variable to authenticate requests to the vendor's API. This is a standard and recommended practice for managing sensitive credentials without hardcoding them in the source code.- [EXTERNAL_DOWNLOADS]: The Python script connects tohttps://redfox.hk/story/api/dy/search/likesRankto retrieve ranking data. This network activity is documented, essential to the skill's primary function, and targets the official domain associated with the skill author.- [INDIRECT_PROMPT_INJECTION]: The skill exhibits good security hygiene when handling external data. Ingestion points: Ranking data (titles, author names) retrieved from the API indouyin_daily_hot.py. Boundary markers: Output is constrained to Markdown table structures. Capability inventory: The skill is limited to performing network GET/POST requests and printing results; it has no file system write or shell execution capabilities. Sanitization: The script includes explicit character replacement (e.g., replacing|with|and[with【) in video titles to prevent content from breaking the Markdown table structure or causing unexpected UI behavior.
Audit Metadata