wechat-hot-article
Pass
Audited by Gen Agent Trust Hub on Jul 31, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill runs a local Python script (
hot_article.py) to query the search API. The script is written using only Python's standard library, avoiding risks associated with third-party dependencies. - [EXTERNAL_DOWNLOADS]: Communicates with the service's API at
doubaoya.comover HTTPS. This is the primary and expected data source for the skill's functionality. - [CREDENTIALS_SAFE]: Secret management is handled correctly using the
DOUBAOYA_API_KEYenvironment variable. The skill instructions specifically prohibit printing or exposing this key to users. - [PROMPT_INJECTION]: The skill processes external data (article titles and metadata), which is a potential surface for indirect prompt injection. However, given the skill's limited capabilities and the nature of the data, the risk is negligible.
Audit Metadata