douyin-top-account
Pass
Audited by Gen Agent Trust Hub on Jul 1, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a local Python script
fetch_top_account.pyto retrieve data. This is standard behavior for skills implementing custom logic and does not involve arbitrary command execution or shell injection risks. - [EXTERNAL_DOWNLOADS]: The script performs HTTPS POST requests to
doubaoya.comto fetch ranking data. This network activity is documented, restricted to a specific domain related to the skill's purpose, and uses secure transport (HTTPS). - [CREDENTIALS_UNSAFE]: Authentication is handled via the
DOUBAOYA_API_KEYenvironment variable. The skill explicitly instructs users not to hardcode or print the key, which aligns with security best practices for secret management.
Audit Metadata