x-top-account
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes command execution for internal script orchestration and to facilitate user viewing of generated reports.
- Evidence in
scripts/fetch_rank.py: Usessubprocess.runto call the report generation script (generate_report.py) within the skill's own environment. - Evidence in
scripts/generate_report.py: Uses platform-specific commands such asopen(macOS),xdg-open(Linux), andos.startfile(Windows) to open the generated HTML report in the user's default browser. - [EXTERNAL_DOWNLOADS]: The skill references external resources for data retrieval and frontend functionality.
- Fetches ranking data from the vendor's official API endpoint at
https://redfox.hk/story/api/x/hotAccount/rankListusing the standardurlliblibrary. - The generated HTML report includes a script tag pointing to the
html2canvaslibrary hosted on the well-knownjsdelivr.netCDN to provide image export capabilities.
Audit Metadata