space-xhs-buddy
Pass
Audited by Gen Agent Trust Hub on Aug 3, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute a shell command to verify the availability of environment variables (
REDFOX_API_KEY,SOCIALDATAX_API_KEY,GUAIKEI_API_TOKEN). The command usessedto mask the values of these keys (sed 's/=.*/=<set>/'), which is a secure method for checking configuration without exposing sensitive credentials to the console or logs. - [SAFE]: The skill's architecture relies on specialized sub-skills (
space-xhs-positioning,space-xhs-image, etc.) to perform specific tasks. It references standard tools and libraries such asplaywrightfor HTML rendering andpandasfor data analysis, which are consistent with its documented purpose of managing content creation workflows. - [SAFE]: The skill establishes clear boundaries and instructions for the agent, emphasizing the importance of user confirmation at key steps and compliance with platform guidelines. It explicitly forbids the fabrication of data or the automation of prohibited platform interactions.
Audit Metadata