The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill incorporates a recharge workflow that utilizes the @alipay/agent-payment tool. This is a legitimate dependency used for processing payments through a well-known service provider to manage API usage credits.
[DATA_EXPOSURE]: The Python scripts contain a fallback mechanism to retrieve the REDFOX_API_KEY from local shell configuration files like .zshrc or .bashrc if it is not found in the environment. This is a local operation intended to assist with authentication and does not involve exfiltration.
[SAFE]: A thorough review of the skill's code, including its data fetching and HTML generation scripts, revealed no evidence of prompt injection, obfuscation, or malicious command execution. The skill adheres to the stated purpose and maintains clear security boundaries.

xiaohongshu-dailytop