ClawHub
Back to skill

Security audit

guaikei-xhs-trending-finder

Security checks across malware telemetry and agentic risk

Overview

This skill is a disclosed Xiaohongshu public-data lookup tool that uses a third-party API and saves results locally, with no evidence of hidden, destructive, or unrelated behavior.

Install only if you are comfortable sending Xiaohongshu keywords, note/profile URLs, requested limits, and your GUAIKEI API token to the guaikei.com service. Treat the generated logs as potentially sensitive business research data and delete or protect them when no longer needed.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (5)

Missing User Warnings

Medium
Confidence
88% confidence
Finding
The README says all task results are automatically saved to `logs/` and filenames include time plus keyword/link naming, which can persist sensitive business queries, tracked profile URLs, or analysis targets without an explicit warning or consent step. Even if the data source is public, the user's search terms, monitored competitors, and collected datasets may be confidential and could be exposed to other local users, backups, or downstream tooling.

Missing User Warnings

Medium
Confidence
88% confidence
Finding
The CLI writes the full detail response to a local JSON file using a filename derived from the input URL, but this file does not clearly disclose that note details and comments will be persisted on disk. Because the skill handles potentially sensitive scraped content, local persistence can create unintended data retention, exposure to other local users/processes, or leakage through backups and logs.

Missing User Warnings

Medium
Confidence
82% confidence
Finding
The program sends the user-provided note URL and comment limit to external API functions to create and fetch a detail task, but this file does not explicitly warn the user that their input will be transmitted to a third-party service. In a data-collection skill, silent transmission can create privacy and compliance issues, especially if users assume processing is local.

Missing User Warnings

Medium
Confidence
91% confidence
Finding
The CLI persists fetched Xiaohongshu results to a local JSON file derived from the target profile URL without any explicit opt-in or warning. Because the skill handles externally fetched content that may include personal data, comments, or other sensitive metadata, silent local retention can create unintended data exposure on shared systems, developer machines, CI runners, or logs/backup locations.

Missing User Warnings

Medium
Confidence
87% confidence
Finding
The CLI persists full search output to a local JSON file automatically after execution, without any explicit opt-in, warning, or controls in this file. Because the results may contain user-supplied keywords and scraped Xiaohongshu content/metadata, this creates a privacy and data-handling risk: sensitive queries or collected third-party data can remain on disk, be accessed by other local users/processes, or be unintentionally retained longer than expected.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.