xiaohongshu-crawler
Pass
Audited by Gen Agent Trust Hub on Aug 8, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill communicates exclusively with the author's verified service domain (doubaoya.com) to perform its data fetching functions.
- [SAFE]: Credential management is handled securely through the DOUBAOYA_API_KEY environment variable. The skill instructions explicitly mandate that the key must not be logged, printed, or echoed to the user.
- [SAFE]: The crawl_xhs.py script is implemented using only the Python standard library (urllib), which eliminates third-party dependency risks and supply chain concerns.
- [SAFE]: User input (keywords and dates) is passed to the script as command-line arguments and handled safely within Python, preventing shell command injection vulnerabilities.
Audit Metadata