cultural-tourism-xiaohongshu-feed
Pass
Audited by Gen Agent Trust Hub on Jul 1, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill connects to 'doubaoya.com' to fetch Xiaohongshu feed data. This is a declared external service integration essential to the skill's primary function. It uses the standard Python 'urllib' library for these requests.
- [COMMAND_EXECUTION]: The skill instructions direct the agent to execute a local Python script ('fetch_culture_feed.py') to interact with the API. This execution is scoped to the skill's own internal directory and processes user-provided keywords for the search query.
- [CREDENTIALS_UNSAFE]: The skill follows security best practices by requiring an API key ('DOUBAOYA_API_KEY') to be provided via environment variables. It explicitly instructs the agent not to print, log, or echo this key back to the user.
Audit Metadata