douyin-hot-trend
Pass
Audited by Gen Agent Trust Hub on Jul 9, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: A thorough analysis of the skill's instructions and script revealed no malicious patterns, prompt injections, or obfuscated code.
- [EXTERNAL_DOWNLOADS]: The Python script
scripts/fetch_hot_trend.pymakes POST requests tohttps://doubaoya.comto retrieve social media trend data. This network activity is consistent with the skill's stated purpose and targets the author's official API infrastructure. - [CREDENTIALS_UNSAFE]: The skill demonstrates safe secret management by requiring the use of an environment variable (
DOUBAOYA_API_KEY) for authentication. The instructions and the script explicitly avoid hardcoding or leaking this token. - [DATA_EXFILTRATION]: There is no evidence of unauthorized data collection. The script only transmits non-sensitive parameters (platform and date ranges) to the vendor API and does not access system files or environment secrets beyond the designated API key.
- [COMMAND_EXECUTION]: The skill uses standard argument parsing and built-in Python libraries. It does not perform any unsafe shell command execution or dynamic code evaluation.
Audit Metadata