xiaohongshu-write
Pass
Audited by Gen Agent Trust Hub on Jul 30, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill uses environment variables (
DOUBAOYA_API_KEY) to manage authentication credentials, avoiding the risk of hardcoded secrets. - [SAFE]: Network activity is restricted to the service's official domain (
doubaoya.com) as required for its primary functionality of fetching trending content data. - [SAFE]: The execution script (
search_xhs_work.py) relies exclusively on the Python standard library (urllib), containing no external dependencies or suspicious remote code patterns. - [SAFE]: Explicit instructions are provided to the agent to ensure sensitive API keys are never printed, displayed to the user, or written to files, maintaining credential confidentiality.
Audit Metadata