xiaohongshu-write

Pass

Audited by Gen Agent Trust Hub on Oct 22, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill manages API credit recharges by utilizing the @alipay/agent-payment Node.js package. The agent is instructed to install this dependency dynamically via npx if the corresponding CLI tool is not found on the system.
  • [COMMAND_EXECUTION]: The skill executes a Python script scripts/fetch_xhs_hot_articles.py to retrieve trending data from the vendor's API. Additionally, it invokes the alipay-bot CLI tool to process payment signals and poll for transaction status during the credit recharge process.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 22, 2026, 11:37 PM