xiaohongshu-top-account
Pass
Audited by Gen Agent Trust Hub on Jul 1, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill communicates exclusively with its designated service endpoint at
doubaoya.comto retrieve ranking data. This is the intended behavior and utilizes standard HTTP POST requests. - [SAFE]: Sensitive credentials (API keys) are managed via environment variables (
DOUBAOYA_API_KEY), adhering to best practices for secret management. The skill instructions explicitly mandate that the key must not be logged, printed, or shared with the user. - [SAFE]: The associated Python script (
fetch_xhs_top_account.py) is transparent, using only standard Python 3 libraries (urllib,argparse,json). It contains no obfuscation, dynamic code execution, or external package dependencies.
Audit Metadata