bilibili-sentiment-dashboard

Pass

Audited by Gen Agent Trust Hub on Apr 30, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes a Python script (scripts/run.py) to manage API interactions with the ai-skills.ai platform. It relies on standard Python libraries and does not execute arbitrary shell commands or process untrusted input as executable code.- [DATA_EXFILTRATION]: User-provided Bilibili links are sent to the ai-skills.ai domain for sentiment analysis. This data transmission is explicitly declared in the SKILL.md security frontmatter, ensuring transparency regarding data flow.- [CREDENTIALS_UNSAFE]: The skill adheres to security best practices by using the AISKILLS_API_KEY environment variable for authentication rather than hardcoding secrets. No embedded credentials or private keys were found in the source code.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 30, 2026, 08:58 AM