douyin-works-crawler
Pass
Audited by Gen Agent Trust Hub on Jun 12, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill performs its primary function by communicating with the official developer API at
https://redfox.hk. This is a legitimate vendor resource used for retrieving public Douyin data. - [CREDENTIALS_UNSAFE]: The skill correctly manages authentication by using the
REDFOX_API_KEYenvironment variable. Documentation explicitly warns against hardcoding secrets, and no hardcoded keys were found in the provided files. - [COMMAND_EXECUTION]: The core logic is implemented in
scripts/douyin_works_fetcher.py, which uses standard Python libraries to perform HTTP requests and format results. The script does not use dangerous execution functions with unvalidated user input. - [DATA_EXFILTRATION]: The skill only transmits user-provided search terms (nicknames or IDs) to the specified API endpoint. It does not access or exfiltrate sensitive local files or environment configuration beyond the required API key.
Audit Metadata