ClawHub
Back to skill

Security audit

guaikei-xhs-growth

Security checks across malware telemetry and agentic risk

Overview

This skill coherently retrieves public Xiaohongshu data through a disclosed third-party API and saves results locally, with no evidence of hidden execution, account mutation, or private-data access.

Install only if you are comfortable sending Xiaohongshu keywords, links, and your GUAIKEI_API_TOKEN to the guaikei.com API. Review and delete the generated logs directory when results contain sensitive research topics, public comments, account URLs, or data you do not want retained locally.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (4)

Context-Inappropriate Capability

Medium
Confidence
89% confidence
Finding
The CLI writes the full structured search output to a local file using a filename derived from user-controlled search terms. Even though the skill is described as read-only, persisting retrieved content creates an unnecessary data-at-rest footprint that can expose collected note/comment data to other local users, backup systems, or later unintended reuse.

Missing User Warnings

Medium
Confidence
88% confidence
Finding
The README states that all task results are automatically saved to a local `logs/` directory, but it does not clearly warn users that scraped note content, comments, account URLs, keywords, and analysis outputs may persist on disk after execution. In a data-scraping skill focused on social-platform content analysis, this creates avoidable data-retention and privacy risk because operators may unknowingly store potentially sensitive or regulated data longer than intended.

Missing User Warnings

Low
Confidence
90% confidence
Finding
The documentation instructs users to configure `GUAIKEI_API_TOKEN` but does not identify it as a sensitive secret or warn against exposing it in logs, screenshots, shell history, or shared examples. In a skill centered on CLI execution and troubleshooting, this omission can increase the chance of accidental credential disclosure during setup or support interactions.

Missing User Warnings

Medium
Confidence
93% confidence
Finding
The tool silently saves search results to local storage without any explicit warning, confirmation, or visible help text indicating that retrieved data will be retained on disk. This can cause unintentional collection of potentially sensitive research targets, keywords, or scraped public content, especially when users expect a transient read-only query tool.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.