Security audit
Security checks across malware telemetry and agentic risk
This Douyin ranking skill is purpose-aligned, but it needs review because report generation can automatically invoke an unsafe Windows shell command and the skill relies on external services/scripts.
Review this before installing if you plan to generate reports on Windows or allow agents to choose output filenames. Use only trusted REDFOX_API_KEY credentials, expect requests to go to redfox.hk, avoid opening generated reports in sensitive contexts unless you accept the CDN dependency, and confirm any subscription includes a clear way to stop recurring updates.
if system == "Darwin": # macOS
subprocess.run(["open", str(abs_path)], check=True)
elif system == "Windows":
subprocess.run(["start", "", str(abs_path)], shell=True, check=True)
else: # Linux
subprocess.run(["xdg-open", str(abs_path)], check=True)
print(f"\n✓ HTML 报告已自动打开: {abs_path}", file=sys.stderr)64/64 vendors flagged this skill as clean.
No suspicious patterns detected.