小红书skill

• Analyzed: May 16, 2026, 4:39 AM
• Findings: 1
• Version: 1.0.2
• Hash: f6de77a3a0b3616d066d9fdbc743d807c2fd28aa7ceba6047ebacb05d2ad8fe2
• Source: palm
• External report: View on VirusTotal

Findings (1)

The OpenClaw AgentSkills bundle is a Python Playwright-based tool for interacting with Xiaohongshu (Rednote), including searching, viewing posts, user profiles, and publishing content. It stores session cookies locally in `~/.xiaohongshu/cookies.json` and reads user-specified local files for publishing (images, videos, markdown). All network interactions are directed to `xiaohongshu.com` or `creator.xiaohongshu.com`. The `SKILL.md` instructions are clear and do not contain any prompt injection attempts against the agent. The code implements anti-bot measures like random delays and captcha detection, which are typical for web automation tools. There is no evidence of intentional malicious behavior such as data exfiltration to unauthorized third parties, backdoor installation, or arbitrary code execution on the host system.