xiaohongshu-note-analyzer
Pass
Audited by Gen Agent Trust Hub on Aug 18, 2026
Risk Level: SAFE
Full Analysis
- [DATA_EXPOSURE]: The skill utilizes the
DOUBAOYA_API_KEYenvironment variable for authentication, which is a secure and standard practice for managing sensitive credentials in development tools. - [COMMAND_EXECUTION]: The included script
fetch_note_data.pyuses the standard Pythonurlliblibrary to communicate with the vendor's official domain (doubaoya.com). The script outputs data in a structured JSON format to the agent. - [INDIRECT_PROMPT_INJECTION]: The skill ingests data from the external Doubaoya API which is subsequently processed by the agent to generate analysis reports.
- Ingestion points: Data is received through the stdout of
scripts/fetch_note_data.pyafter queryingdoubaoya.com. - Boundary markers: No explicit delimiters or instructions to ignore embedded content were found in the instructions.
- Capability inventory: The agent is tasked with summarizing and analyzing the JSON output to produce a content strategy report.
- Sanitization: The script performs basic JSON parsing and error handling, but no specific content filtering for the API response was observed.
Audit Metadata