wechat-10w-hot
Pass
Audited by Gen Agent Trust Hub on Aug 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a standard implementation for fetching external data via a dedicated API service (doubaoya.com).
- [CREDENTIALS_SAFE]: The skill correctly instructs users to store sensitive API keys in an environment variable (
DOUBAOYA_API_KEY) and provides explicit instructions never to hardcode or print these credentials. - [EXTERNAL_DOWNLOADS]: No external code or packages are downloaded during execution. The script uses Python's standard
urlliblibrary to avoid external dependencies. - [DATA_EXFILTRATION]: Network operations are strictly limited to the official API endpoint
https://doubaoya.com/api/apis/gongzhonghao/category-time-hot/call. No unauthorized data transmission or sensitive file access was detected. - [COMMAND_EXECUTION]: The shell commands provided in the documentation are benign examples for running the local Python script and setting environment variables.
Audit Metadata