小红书

• Analyzed: May 12, 2026, 3:20 AM
• Findings: 1
• Version: 0.1.0
• Hash: 9b79dc93b80b19197baf31ae217a438c6bec7f0b00fdaf3b6c0c6ecad9f55bd0
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is designed for web scraping and interaction with XiaoHongShu, employing sophisticated reverse-engineering techniques to bypass anti-bot measures. While its functionality aligns with the stated purpose, the nature of web scraping, anti-bot bypass, and the capability to handle security challenges (like QR code logins) without clear malicious intent, classifies it as suspicious. There is no evidence of data exfiltration to unauthorized endpoints, persistence, or unauthorized remote control. The hardcoded path in SKILL.md and a hardcoded fingerprint example in scripts/request/web/encrypt/other/XhsFpGenerator.py are minor concerns but do not indicate malicious intent.