douyin-daily-hot
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill performs legitimate data retrieval from the author's API (redfox.hk) to provide Douyin rankings, using standard Python libraries to process and display results.- [EXTERNAL_DOWNLOADS]: The skill provides instructions for the agent to install the @alipay/agent-payment package using npx if it is not already present. This package is used to facilitate a payment flow for API credits. As this tool originates from a well-known service provider, the installation is considered a standard operational requirement.- [INDIRECT_PROMPT_INJECTION]: The skill handles data from an external API (Douyin video information). The script scripts/douyin_daily_hot.py includes sanitization logic that escapes special characters (pipes and brackets) to ensure the data remains within the intended Markdown table structure, mitigating potential injection risks from untrusted content.
- Ingestion points: Data is ingested from the redfox.hk API within douyin_daily_hot.py.
- Boundary markers: Strict Markdown table formatting is enforced in the SKILL.md instructions.
- Capability inventory: The skill performs network requests for data fetching and is directed to use a specific CLI tool for payment processing.
- Sanitization: Video titles are sanitized using character replacement in the Python script.
Audit Metadata