bilibili-portfolio-search
Pass
Audited by Gen Agent Trust Hub on Jul 1, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill performs network operations to
doubaoya.com. This is the primary and expected function of the tool as described in its documentation. The script uses the Python standard library'surllibmodule, avoiding third-party dependency risks. - [SAFE]: Secret management is handled correctly using the
DOUBAOYA_API_KEYenvironment variable. The skill includes explicit instructions and code-level safeguards to ensure that the API key is never printed to logs or stdout. - [SAFE]: No obfuscation, privilege escalation, or persistence mechanisms were detected. The scripts are transparent and perform only the documented tasks of data retrieval and formatting.
Audit Metadata