xiaohongshu-title
Pass
Audited by Gen Agent Trust Hub on Aug 18, 2026
Risk Level: SAFE
Full Analysis
- [DATA_EXFILTRATION]: The skill uses an environment variable
DOUBAOYA_API_KEYfor authentication. The instructions and scripts explicitly follow best practices by advising against hardcoding the key or printing it to logs/output, reducing the risk of accidental exposure. - [COMMAND_EXECUTION]: The skill executes a Python script
fetch_title_data.pyto perform API requests. The script uses standard libraries and does not involve risky patterns such as shell injection or dynamic code evaluation. - [EXTERNAL_DOWNLOADS]: The script performs network operations using the
urlliblibrary to fetch data fromhttps://doubaoya.com/api/apis/xiaohongshu/xiaohongshu-coze/call. This is the primary purpose of the skill and targets the vendor's own API infrastructure. No other external resources are requested.
Audit Metadata