wechat-video-downloader
Pass
Audited by Gen Agent Trust Hub on Jul 24, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill makes network requests to
https://redfox.hk/story/api/parseWork/videoDownload/sph. This is the vendor's own infrastructure (redfox-data) and is used as the primary mechanism for the skill's functionality. - [COMMAND_EXECUTION]: The skill executes a local Python script
scripts/parse_video_download.pywhich performs the API calls and processes the JSON responses. The script usage is limited to its intended purpose. - [CREDENTIALS_UNSAFE]: No hardcoded API keys or secrets were found. The skill correctly instructs users to provide the
REDFOX_API_KEYvia environment variables or a local configuration file, and explicitly warns against hardcoding keys in plain text. - [DATA_EXFILTRATION]: No sensitive local files (such as SSH keys, cloud credentials, or environment files) are accessed. The data sent to the external API is limited to the user-provided video URL and a source identifier.
- [PROMPT_INJECTION]: The skill's instructions focus on functional execution and formatting of results. It does not contain patterns intended to bypass safety filters or override the agent's core instructions.
Audit Metadata