Xiaohongshu Analyzer

v1.0.0

小红书笔记分析、爆文拆解、关键词挖掘、竞品监控。适合内容创作者、品牌运营、电商卖家。

0· 122·1 current·1 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Pending
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
Name and description (Xiaohongshu note analysis, keyword mining, competitor monitoring) align with the declared needs: python3 and curl plus Python HTML/parsing libraries. Nothing requested (no cloud credentials, no unusual binaries) appears unrelated to the stated purpose.
Instruction Scope
SKILL.md contains high-level scraping/analysis instructions (prompt patterns and examples) but no low-level commands. It does not instruct reading local files or accessing environment secrets. Note: the instructions assume the agent will fetch public Xiaohongshu pages; depending on the site, scraping may require cookies, JS rendering, or violate platform terms — the skill mentions obeying crawler policy but provides no automated handling for auth/JS.
Install Mechanism
There is no formal install spec in the registry, but SKILL.md metadata lists pip packages (requests, beautifulsoup4) to install. Installing these from PyPI is expected for this functionality and is moderate-risk (standard packages). The mismatch between 'no install spec' in registry and install hints inside SKILL.md is an internal inconsistency to be aware of.
Credentials
The skill requests no environment variables, no credentials, and no config paths. That is proportional to the stated public-data scraping/analysis function.
Persistence & Privilege
always is false and the skill does not request to persist or modify other agent/system settings. The default autonomous invocation is allowed (platform default) but not elevated here.
Scan Findings in Context
[regex-scan-none] expected: Scanner found no code files or regex matches. This is expected for an instruction-only skill; absence of findings is not evidence of safety, but consistent with the package containing only prose.
Assessment
This skill appears coherent for public-page analysis: it only needs python3/curl and common parsing libraries. Before installing, consider: (1) the skill will fetch Xiaohongshu pages — check that scraping those pages complies with the site's terms and your legal/regulatory constraints; (2) the SKILL.md suggests pip installs (requests, beautifulsoup4) — installing packages from PyPI is normal but review them if you run in a sensitive environment; (3) some Xiaohongshu content may require authentication or JS rendering; this skill does not request credentials, so it may not work for private content; (4) the registry metadata and SKILL.md slightly disagree about install behavior — verify how your agent platform will perform installs. If you need stricter controls, run the skill in a sandboxed agent with limited network access or require manual approval before it fetches external URLs.

Like a lobster shell, security has layers — review code before you run it.

latestvk972831g4ejechk9ajw9z40axx83jraw

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

Runtime requirements

📕 Clawdis
Binspython3, curl

Comments