gzh-toutiao-growth-rank
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSDATA_EXFILTRATION
Full Analysis
- [SAFE]: The skill operates as intended, providing legitimate WeChat official account ranking data without any hidden malicious instructions, obfuscation, or safety bypass attempts.
- [EXTERNAL_DOWNLOADS]: The Python script
scripts/heima_rank.pymakes network requests to the official vendor API athttps://redfox.hk/story/api/gzh/heima/rankList. This is expected behavior for the skill's primary purpose. - [DATA_EXFILTRATION]: The script
scripts/heima_rank.pycontains logic to read local shell configuration files such as~/.zshrcand~/.bashrcto retrieve theREDFOX_API_KEY. While these are sensitive paths, the operation is targeted specifically at the skill's own credential and is explicitly documented in the installation steps, posing no unexpected risk.
Audit Metadata