ClawHub
Back to skill

Security audit

guaikei-xhs-search-results

Security checks across malware telemetry and agentic risk

Overview

This skill coherently retrieves public Xiaohongshu data through a disclosed third-party API, with local result logging that users should be aware of.

Install only if you are comfortable sending Xiaohongshu keywords or URLs and the GUAIKEI API token to guaikei.com, and remember that successful results are saved locally under logs. Avoid using it for sensitive research topics on shared machines, and periodically delete saved logs if you do not need them.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (3)

Vague Triggers

Medium
Confidence
85% confidence
Finding
The trigger text is broad enough that the skill may be invoked whenever a user mentions Xiaohongshu plus a keyword or link, even if the user did not explicitly request external retrieval. That can cause unintended transmission of user-provided links/queries to a third-party API, increasing privacy and data-minimization risk and making accidental over-invocation more likely.

Missing User Warnings

Medium
Confidence
89% confidence
Finding
The README states that all task results are automatically saved to the `logs/` directory, but it does not clearly warn users that searched keywords, URLs, note details, comments, and creator data may persist locally. In a data-scraping/analysis skill, this can create unintended retention of potentially sensitive business research or personal data, increasing exposure if the host is shared, backed up, or compromised.

Missing User Warnings

Medium
Confidence
80% confidence
Finding
The CLI writes full search results, including the user’s query and returned content, to a local JSON file without any explicit consent, warning, or opt-in control in this file. This creates a privacy and data-retention risk because sensitive searches or scraped content may persist on disk, be accessible to other local users/processes, or be unintentionally committed, synced, or exfiltrated later.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

Detected: suspicious.exposed_secret_literal

File appears to expose a hardcoded API secret or token.

Critical
Code
suspicious.exposed_secret_literal
Location
SKILL.md:16