ClawHub
Back to skill

Security audit

guaikei·小红书趋势表

Security checks across malware telemetry and agentic risk

Overview

This skill is a disclosed Xiaohongshu public-data retrieval tool that sends user-provided search terms or links to a third-party API and saves returned results locally.

Install only if you are comfortable sending Xiaohongshu search terms or links to guaikei.com with your API token. Review and delete the generated logs when they are no longer needed, especially if results contain comments, creator profile data, or competitive research records.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (3)

Vague Triggers

Medium
Confidence
91% confidence
Finding
The trigger description is broad enough to match generic requests about content analysis, note links, 'rednote/xhs', or business research, which can cause the skill to activate in cases the user did not clearly intend. Mis-triggering can lead to unnecessary external data access and transmission of user-provided links or keywords to a third-party API, creating privacy and consent risks.

Missing User Warnings

Medium
Confidence
84% confidence
Finding
The CLI writes the full fetched note details and comments to a local JSON file, creating persistent storage of potentially sensitive or regulated third-party content without explicit user consent, retention controls, or redaction. In this skill’s context, the data may include user-generated comments, profile-linked content, and competitive intelligence artifacts, which increases privacy and data-handling risk if the host environment is shared, monitored, or compromised.

Missing User Warnings

Medium
Confidence
92% confidence
Finding
The CLI writes the full search output to a local JSON file using a filename derived from user-controlled input, without an explicit consent step or clear disclosure at execution time. In this skill's context, results may include scraped public content, comments, or analysis data that can be sensitive from a privacy/compliance perspective, and silent local persistence increases the risk of unintended retention or later exposure.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

Detected: suspicious.exposed_secret_literal

File appears to expose a hardcoded API secret or token.

Critical
Code
suspicious.exposed_secret_literal
Location
SKILL.md:17