douyin-video-downloader
Pass
Audited by Gen Agent Trust Hub on Jul 30, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill's behavior is consistent with its stated purpose of downloading social media content. No unauthorized access or hidden malicious instructions were found.
- [COMMAND_EXECUTION]: The skill utilizes a Python script (
scripts/douyin_video_downloader.py) to orchestrate API calls and file system operations. These operations are triggered by user-provided parameters and are confined to the intended functionality. - [EXTERNAL_DOWNLOADS]: The script communicates with the vendor's API at
redfox.hkto fetch video metadata and performs downloads from content delivery links provided by the service. These network operations are necessary for the tool's core utility. - [CREDENTIALS_UNSAFE]: Security best practices are followed for credential management. The skill requires an API key provided via the
REDFOX_API_KEYenvironment variable or a local configuration file (~/.qoder/apis/redfox.json), avoiding hardcoded secrets.
Audit Metadata