guaikei·小红书笔记·评论·博主

• Outcome: Pass
• Latest audit: Aug 16, 2026 · 1:43 AM UTC
• Version: 1.0.0

Overview

This skill is a disclosed Xiaohongshu public-data lookup tool that uses a third-party API and saves results locally, with privacy considerations users should understand before use.

Install only if you are comfortable sending Xiaohongshu keywords, note/profile URLs, API token authentication, and returned public-content data to guaikei.com. Treat the local logs/ directory as retained research data and delete or protect it if queries, comments, creator data, or business analysis are sensitive.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• MCP Least Privilege: Underdeclared Capability, Wildcard Permission, Missing Permission Declaration
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access

Findings (6)

Lp3

Medium

• Category: MCP Least Privilege
• Confidence: 89% confidence
• Finding: The skill requires and uses the GUAIKEI_API_TOKEN environment variable, but there is no explicit declared permissions model communicating that environment access is needed. This weakens transparency and security review because users and hosting systems may not clearly understand that sensitive credentials are consumed by the skill.

Missing User Warnings

Medium

• Confidence: 95% confidence
• Finding: The skill sends user-supplied keywords, note URLs, profile URLs, and retrieved content to a third-party API service, but the user-facing description does not prominently warn that this data leaves the local environment. That creates a privacy and consent risk because users may provide sensitive research targets or internal investigation URLs without realizing they are transmitted externally.

Missing User Warnings

Medium

• Confidence: 97% confidence
• Finding: The skill states that every execution result is automatically saved under logs/, but this local data retention is not surfaced as a prominent warning before use. Persisting search terms, URLs, comments, and creator data can expose sensitive business research, user interests, or regulated content to other local users, backups, or downstream tooling.

Missing User Warnings

Medium

• Confidence: 94% confidence
• Finding: The README states that all task results are automatically saved to a local `logs/` directory, but it does not clearly warn users that scraped note details, comments, creator data, or query history will be retained on disk. In a data-harvesting tool, this increases the risk of unintended persistence, local disclosure, and over-retention of potentially sensitive or regulated public-profile data.

Missing User Warnings

Medium

• Confidence: 89% confidence
• Finding: The CLI writes the full search output, including user-supplied keyword and returned content data, to a local JSON file without an explicit opt-in or warning. In a data-collection skill, this creates a privacy and data-retention risk because sensitive research terms or collected public content may be persisted unexpectedly on shared hosts, CI runners, or developer machines.

Missing User Warnings

Medium

• Confidence: 83% confidence
• Finding: The script sends the user-provided keyword and query parameters to an external API service, but this file does not present a clear privacy notice or consent mechanism before transmission. While external API use is expected for this skill, users may still unknowingly submit sensitive search terms, creating confidentiality and compliance concerns.

VirusTotal

64/64 vendors flagged this skill as clean.

Static analysis

No suspicious patterns detected.