Security audit
社媒数据助手 小红书 MCP | Xiaohongshu XHS RedNote MCP
Security checks for vulnerabilities and agentic risk
Overview
This is a disclosed read-only XHS research plugin that forwards user-requested lookups to SocialDataX's hosted MCP service and does not show local persistence or account-changing behavior.
Install only if you are comfortable sending your XHS search terms, shared links, IDs, pagination tokens, and SocialDataX API key to SocialDataX's hosted MCP endpoint. Keep the API key in environment or secret settings and avoid using the plugin with private links or data you do not want processed by that service.
SkillSpector was not run because this plugin release contains no bundled skills.
Static analysis
No suspicious patterns detected.