x-top-account

Pass

Audited by Gen Agent Trust Hub on Sep 29, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes command execution for internal script orchestration and to facilitate user viewing of generated reports.
  • Evidence in scripts/fetch_rank.py: Uses subprocess.run to call the report generation script (generate_report.py) within the skill's own environment.
  • Evidence in scripts/generate_report.py: Uses platform-specific commands such as open (macOS), xdg-open (Linux), and os.startfile (Windows) to open the generated HTML report in the user's default browser.
  • [EXTERNAL_DOWNLOADS]: The skill references external resources for data retrieval and frontend functionality.
  • Fetches ranking data from the vendor's official API endpoint at https://redfox.hk/story/api/x/hotAccount/rankList using the standard urllib library.
  • The generated HTML report includes a script tag pointing to the html2canvas library hosted on the well-known jsdelivr.net CDN to provide image export capabilities.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 29, 2026, 02:39 AM