gzh-ai-feed
Pass
Audited by Gen Agent Trust Hub on Jun 12, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The script communicates with the official RedFoxHub API at
https://redfox.hkto retrieve curated article metadata and statistics. - [COMMAND_EXECUTION]: Uses
subprocess.runto manage local automation tasks, including setting up macOS LaunchAgents or crontab entries for the subscription feature, and invoking the system browser to open generated reports. - [CREDENTIALS_UNSAFE]: The skill requires a
REDFOX_API_KEY, which it correctly handles by reading from environment variables or a local configuration file, avoiding hardcoded secrets.
Audit Metadata