Security audit

xhs-dashboard-build

Security checks across malware telemetry and agentic risk

Overview

This is a disclosed public Xiaohongshu data research skill, with expected third-party API use and local result logging that users should be aware of.

Install only if you are comfortable sending Xiaohongshu keywords, public note/profile URLs, and your Guaikei API token to the Guaikei service. Treat generated logs as retained research data, especially for competitor or sensitive market research, and delete or protect the logs directory when needed.

SkillSpector

By NVIDIA

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (6)

Missing User Warnings

Medium

Confidence: 84% confidence
Finding: The README states that all task results are automatically saved to the `logs/` directory, but it does not clearly warn users that scraped URLs, keywords, note details, and comments may persist on disk after execution. In a data-scraping/competitive-intelligence tool, this increases the chance of unintended local retention, accidental sharing, or leakage of collected data, especially on shared systems or when logs are backed up or committed.

Missing User Warnings

Medium

Confidence: 93% confidence
Finding: The CLI writes fetched comment results to a local JSON file automatically, which can persist potentially sensitive or regulated data on disk without clear user disclosure or consent at the point of use. In a data-collection skill, silent persistence increases the risk of unintended retention, later exfiltration, or misuse on shared systems.

Missing User Warnings

Medium

Confidence: 88% confidence
Finding: The script sends the user-supplied note URL together with an API token to external APIs to create and retrieve comment tasks, but the user-facing flow does not explicitly warn that input data will be transmitted over the network to a third-party service. For a scraping/analytics skill that processes public-content URLs, this is not inherently malicious, but lack of transparency creates privacy, compliance, and trust risks.

Missing User Warnings

Medium

Confidence: 85% confidence
Finding: This CLI persists fetched results to a local file without disclosing that behavior in its help text or usage guidance. Even if the scraped content is public, the saved output can still expose user activity, queried targets, timestamps, and collected datasets on shared systems or CI runners, creating an unexpected privacy and data-handling risk.

Missing User Warnings

Medium

Confidence: 92% confidence
Finding: The CLI persists full search output to a local JSON file named with the user keyword, which can expose potentially sensitive query terms and collected result data to other local users, backups, or log aggregation systems. In this skill’s data-scraping/analysis context, persistent storage increases privacy and compliance risk because users may search competitors, creators, or sensitive topics without realizing those queries are retained on disk.

Missing User Warnings

Medium

Confidence: 83% confidence
Finding: This command sends the user’s keyword and filter parameters to a remote API using an authentication token, but the interface only notes that the token must be configured and does not explicitly warn that search terms are transmitted off-host. In a tool meant for market research and public-content scraping, that can leak business-sensitive research intent or personal-interest data to the service operator and network telemetry.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.