space-xhs-buddy

Pass

Audited by Gen Agent Trust Hub on Aug 3, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructs the agent to execute a shell command to verify the availability of environment variables (REDFOX_API_KEY, SOCIALDATAX_API_KEY, GUAIKEI_API_TOKEN). The command uses sed to mask the values of these keys (sed 's/=.*/=<set>/'), which is a secure method for checking configuration without exposing sensitive credentials to the console or logs.
  • [SAFE]: The skill's architecture relies on specialized sub-skills (space-xhs-positioning, space-xhs-image, etc.) to perform specific tasks. It references standard tools and libraries such as playwright for HTML rendering and pandas for data analysis, which are consistent with its documented purpose of managing content creation workflows.
  • [SAFE]: The skill establishes clear boundaries and instructions for the agent, emphasizing the importance of user confirmation at key steps and compliance with platform guidelines. It explicitly forbids the fabrication of data or the automation of prohibited platform interactions.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 3, 2026, 05:11 PM
Security Audit — agent-trust-hub — space-xhs-buddy