小红书爆款助手

小红书爆款助手，热点追踪、文案生成、标签推荐。

Security Scan

The skill's description matches its stated purpose, but the runtime instructions depend on a Python script that is not included or installed and the skill provides no install guidance — this mismatch is concerning.

Purpose & Capability

Name/description (小红书爆款助手: trend tracking, caption/tag suggestions) align with requiring a Python tool. Requesting only python3 is proportionate. However the SKILL.md claims features implemented by rednote-viral-writer.py but no code or installer is provided.

Instruction Scope

Runtime instructions tell the agent to run a local Python script (rednote-viral-writer.py) with specific subcommands. The repository/skill bundle contains no such file and there is no install step, so the instructions are incomplete and ambiguous. The commands could perform web access or other actions, but those behaviors are unspecified.

Install Mechanism

There is no install spec (instruction-only), which is low-risk by itself. The lack of an install mechanism is the root cause of the incoherence (the SKILL.md expects a script that isn't provided).

Credentials

The skill requests no environment variables or credentials, which is appropriate for the described functionality. There are no declared config paths. This is proportionate.

Persistence & Privilege

Skill is not always-enabled and is user-invocable; it does not request elevated persistence or modify other skills. Autonomous invocation is allowed by default but is not combined with other high-risk indicators here.

What to consider before installing

This skill is instruction-only and tells the agent to run rednote-viral-writer.py, but the package contains no code or install instructions. Before installing or enabling it: 1) inspect the referenced GitHub repo (homepage) and verify the exact rednote-viral-writer.py script and its contents; 2) review any network calls or data collection the script performs (scraping, API use, external posting); 3) only run the script from a trusted source or after auditing it locally; 4) avoid providing credentials — the skill does not request any, and none should be needed for basic trend/tag suggestions; 5) if you cannot find or verify the script, treat the skill as incomplete and avoid enabling it. Additional info (repository contents or a provided install spec) would raise confidence and could change the assessment.

小红书爆款助手 (RedNote Viral Writer)

小红书创作者必备工具。

功能

• 搜索热门话题
• 生成爆款文案（种草/干货/生活/情感）
• 推荐热门标签
• 分析爆款模板

使用示例

# 搜索热点
python rednote-viral-writer.py search_trends

# 生成文案
python rednote-viral-writer.py generate_caption 种草 蓝牙耳机

# 推荐标签
python rednote-viral-writer.py suggest_tags

# 分析模板
python rednote-viral-writer.py analyze_template

---

By Miya - 2026