xiaohongshu-top-account
Pass
Audited by Gen Agent Trust Hub on Jul 30, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill adheres to security best practices by using environment variables (
REDFOX_API_KEY) to manage authentication, preventing the exposure of sensitive credentials in code or logs. - [DATA_EXFILTRATION]: The skill communicates with the vendor's official API endpoint at
https://redfox.hkto retrieve ranking data. This network activity is essential to the skill's primary function and is restricted to the author's own infrastructure. - [EXTERNAL_DOWNLOADS]: The generated HTML reports include a reference to the
html2canvaslibrary fromcdn.jsdelivr.net. This is a well-known and legitimate service used to provide users with the ability to export reports as images. - [SAFE]: The script
generate_report.pycorrectly sanitizes external data using the Python standard library'shtmlmodule, mitigating potential injection risks in the generated reports.
Audit Metadata