xiaohongshu-title

Pass

Audited by Gen Agent Trust Hub on Aug 18, 2026

Risk Level: SAFE
Full Analysis
  • [DATA_EXFILTRATION]: The skill uses an environment variable DOUBAOYA_API_KEY for authentication. The instructions and scripts explicitly follow best practices by advising against hardcoding the key or printing it to logs/output, reducing the risk of accidental exposure.
  • [COMMAND_EXECUTION]: The skill executes a Python script fetch_title_data.py to perform API requests. The script uses standard libraries and does not involve risky patterns such as shell injection or dynamic code evaluation.
  • [EXTERNAL_DOWNLOADS]: The script performs network operations using the urllib library to fetch data from https://doubaoya.com/api/apis/xiaohongshu/xiaohongshu-coze/call. This is the primary purpose of the skill and targets the vendor's own API infrastructure. No other external resources are requested.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 18, 2026, 11:44 AM
Security Audit — agent-trust-hub — xiaohongshu-title