last30days-cn
Pass
Audited by Gen Agent Trust Hub on Jul 21, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill utilizes well-known and legitimate domains (such as cn.bing.com, weibo.com, and bilibili.com) for its primary data retrieval operations.
- [SAFE]: The code includes a dedicated redaction mechanism in
scripts/lib/http.pyto ensure that API keys, tokens, and secrets are masked in debug logs, preventing accidental credential exposure. - [SAFE]: Security hardening is present in the HTML reporting logic within
scripts/lib/render.py, which sanitizes search result links to block dangerous schemes likejavascript:anddata:, protecting against XSS. - [SAFE]: The environment management logic in
scripts/lib/env.pyproactively checks configuration file permissions and advises the user to use restrictive settings (chmod 600) to protect local secrets. - [SAFE]: All identified Python dependencies are standard, well-established libraries for natural language processing and browser automation.
Audit Metadata