trending-hub-top10
Pass
Audited by Gen Agent Trust Hub on Aug 19, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill uses environment variables for secret management, specifically requiring
DOUBAOYA_API_KEYto be set in the environment rather than hardcoded. This aligns with security best practices. - [SAFE]: The execution script
fetch_hot_keywords.pyrelies exclusively on the Python standard library (urllib,json,os,datetime) and does not introduce any third-party dependencies or remote code execution risks. - [SAFE]: Network communication is limited to the service's official API endpoint (
doubaoya.com) for the purpose of fetching the trends described in the skill's documentation. - [SAFE]: The skill processes external data from the API but does not possess any exploitable capabilities (such as file writing or command execution) that would make it vulnerable to indirect prompt injection.
Audit Metadata