last30days-cn

Pass

Audited by Gen Agent Trust Hub on Jul 21, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill utilizes well-known and legitimate domains (such as cn.bing.com, weibo.com, and bilibili.com) for its primary data retrieval operations.
  • [SAFE]: The code includes a dedicated redaction mechanism in scripts/lib/http.py to ensure that API keys, tokens, and secrets are masked in debug logs, preventing accidental credential exposure.
  • [SAFE]: Security hardening is present in the HTML reporting logic within scripts/lib/render.py, which sanitizes search result links to block dangerous schemes like javascript: and data:, protecting against XSS.
  • [SAFE]: The environment management logic in scripts/lib/env.py proactively checks configuration file permissions and advises the user to use restrictive settings (chmod 600) to protect local secrets.
  • [SAFE]: All identified Python dependencies are standard, well-established libraries for natural language processing and browser automation.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 21, 2026, 02:25 AM
Security Audit — agent-trust-hub — last30days-cn