xiaohongshu-note-analyzer

Pass

Audited by Gen Agent Trust Hub on Aug 18, 2026

Risk Level: SAFE
Full Analysis
  • [DATA_EXPOSURE]: The skill utilizes the DOUBAOYA_API_KEY environment variable for authentication, which is a secure and standard practice for managing sensitive credentials in development tools.
  • [COMMAND_EXECUTION]: The included script fetch_note_data.py uses the standard Python urllib library to communicate with the vendor's official domain (doubaoya.com). The script outputs data in a structured JSON format to the agent.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests data from the external Doubaoya API which is subsequently processed by the agent to generate analysis reports.
  • Ingestion points: Data is received through the stdout of scripts/fetch_note_data.py after querying doubaoya.com.
  • Boundary markers: No explicit delimiters or instructions to ignore embedded content were found in the instructions.
  • Capability inventory: The agent is tasked with summarizing and analyzing the JSON output to produce a content strategy report.
  • Sanitization: The script performs basic JSON parsing and error handling, but no specific content filtering for the API response was observed.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 18, 2026, 11:44 AM
Security Audit — agent-trust-hub — xiaohongshu-note-analyzer