Xiaohongshu Analyzer

Security checks across malware telemetry and agentic risk

Overview

This appears to be a purpose-aligned Xiaohongshu analysis helper, with user-noticeable use of public web data retrieval and common Python scraping libraries.

This skill looks safe to install for analyzing public Xiaohongshu content. Before using it, make sure the requested analysis follows Xiaohongshu platform rules, avoid private or login-only data, and consider pinning the listed Python dependencies if you need stricter supply-chain control.

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Risk analysis

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

#
ASI02: Tool Misuse and Exploitation
Low
What this means

The agent may fetch and summarize public Xiaohongshu pages or account activity, so misuse could violate platform rules or produce unreliable scraped metrics.

Why it was flagged

The skill is intended to retrieve and analyze Xiaohongshu post/account data, which is purpose-aligned but relies on public platform data collection where rate limits, terms, and user direction matter.

Skill content
获取点赞、收藏、评论数据...竞品监控: 追踪对标账号的笔记表现...遵守平台爬虫政策
Recommendation

Use it only for user-requested analysis of public content, respect Xiaohongshu’s terms and robots/crawling policies, and avoid collecting private or login-only data.

#
ASI04: Agentic Supply Chain Vulnerabilities
Info
What this means

Installing unpinned dependencies may pull whatever current package versions are available at install time.

Why it was flagged

The skill documents third-party pip packages that are normal for web retrieval/parsing, but the versions are not pinned.

Skill content
"install": [{ "kind": "pip", "package": "requests" }, { "kind": "pip", "package": "beautifulsoup4" }]
Recommendation

Prefer pinned, trusted package versions if reproducibility or supply-chain control is important.