小红书账号诊断 · XHS Account Analyzer — 用你的创作者后台官方数据体检 + 对标爆款

• Outcome: Review
• Latest audit: Sep 18, 2026 · 8:02 AM UTC
• Version: 1.1.5

Overview

The skill appears aimed at XHS creator analytics, but it needs Review because it automates a logged-in browser, persists account analytics locally, and ships an obfuscated LLM helper with a configurable endpoint.

Review before installing. Use it only if you are comfortable letting it automate your logged-in XHS Chrome session, export creator analytics, write reports and intermediate files locally, and send analysis prompts through the webclaw3 local pipeline. Verify that WC3_LLM_ENDPOINT is unset or points only to an endpoint you trust, and prefer pinned/verified install commands or an isolated browser profile for sensitive accounts.

A.I.G

Vulnerability Patterns

• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review
• Embedded Malicious Code: Ships malicious scripts inside the skill and executes them locally
• Unauthorized Access and Privilege Escalation: Obtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep
• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• MCP Least Privilege: Underdeclared Capability, Wildcard Permission, Missing Permission Declaration

Findings (29)

Obfuscated Code

High

• Category: Supply Chain
• Confidence: 99% confidence

Finding

The embedded high-entropy encoded blob is a hallmark of packed/obfuscated code and may hide additional strings or behavior not evident from surface reading. In this skill context, packed content is especially suspicious because the advertised functionality should not require concealment.

Content

Scanner excerpt · wc3-code.mjs (reported line 2)May include surrounding context.

js

#!/usr/bin/env node
const _0x46785b=_0x18df;function _0x442a(){const _0x2e7a56=['ls1WCM9TChq','rxjYB3i6ioAxOoAZLEI/NUAoPsbWAxbLBgLUzsbZzxj2zE+8Ia','yxbWBgLJyxrPB24VANnVBG','mZziy21rAMe','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','otK2ntyWqu13EgLx','mJa1oduWnfHAz2niCW','Ahr0CdOVlZeYnY4WlJaUmtOZndyWl2fWAs9SBg0','D3jPDgu','rxjYB3i6ihnLCNzLia','C3rYAw5NAwz5','CgfYC2u','DgLTzw91Da','C3rHCNrZv2L0Aa','77Yi5y+V55sOifDdm19mte1Fru5eue9jtLqG6kAg55Uw77YjcG','ue9tva','rxjYB3i6ic0TChjVBxb0ig9Yic0TChjVBxb0lwzPBguGCMvXDwLYzwqk','C2LNBMfS','C++8IqO','qwjVCNrfCNjVCG','rxjYB3i6ic0TB3v0Chv0ihjLCxvPCMvKcG','BwvZC2fNzq','ls1VDxrWDxq','ywjVCNq','zxjYB3i','mtmZmZz2CgnpzMy','BgvUz3rO','CMvZDw1L','C2XPy2u','yxjNDG','DhjPBq','B3v0Chv0','BMfTzq','ls1Zy2HLBwe','mZa2nJa0r1PmC0nr','CMvZDwX0','rxjYB3iGCMvHzgLUzYbZy2HLBwe6ia','ChjVBxb0rMLSzq','odGWndq2BezMvwvw','ChjVBxb0','rxjYB3i6ioIVT+AXGUI2HEAxTU+8Ia','C3rYAw5N','ANnVBG','C3rHDhvZ','ls10Aw1LB3v0','C2nOzw1H','zxHPDa','C3rKzxjY','mJq4ntaZogzHr2z0qq','mJi5nJyWr3rMqxv4','ls1Yzxn1Bwu','DxrMltG','C3rKB3v0','
...[truncated 26 chars]

Obfuscated Code

High

• Category: Supply Chain
• Confidence: 99% confidence

Finding

The embedded high-entropy encoded blob is a hallmark of packed/obfuscated code and may hide additional strings or behavior not evident from surface reading. In this skill context, packed content is especially suspicious because the advertised functionality should not require concealment.

Content

Scanner excerpt · wc3-code.mjs (reported line 2)May include surrounding context.

js

#!/usr/bin/env node
const _0x46785b=_0x18df;function _0x442a(){const _0x2e7a56=['ls1WCM9TChq','rxjYB3i6ioAxOoAZLEI/NUAoPsbWAxbLBgLUzsbZzxj2zE+8Ia','yxbWBgLJyxrPB24VANnVBG','mZziy21rAMe','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','otK2ntyWqu13EgLx','mJa1oduWnfHAz2niCW','Ahr0CdOVlZeYnY4WlJaUmtOZndyWl2fWAs9SBg0','D3jPDgu','rxjYB3i6ihnLCNzLia','C3rYAw5NAwz5','CgfYC2u','DgLTzw91Da','C3rHCNrZv2L0Aa','77Yi5y+V55sOifDdm19mte1Fru5eue9jtLqG6kAg55Uw77YjcG','ue9tva','rxjYB3i6ic0TChjVBxb0ig9Yic0TChjVBxb0lwzPBguGCMvXDwLYzwqk','C2LNBMfS','C++8IqO','qwjVCNrfCNjVCG','rxjYB3i6ic0TB3v0Chv0ihjLCxvPCMvKcG','BwvZC2fNzq','ls1VDxrWDxq','ywjVCNq','zxjYB3i','mtmZmZz2CgnpzMy','BgvUz3rO','CMvZDw1L','C2XPy2u','yxjNDG','DhjPBq','B3v0Chv0','BMfTzq','ls1Zy2HLBwe','mZa2nJa0r1PmC0nr','CMvZDwX0','rxjYB3iGCMvHzgLUzYbZy2HLBwe6ia','ChjVBxb0rMLSzq','odGWndq2BezMvwvw','ChjVBxb0','rxjYB3i6ioIVT+AXGUI2HEAxTU+8Ia','C3rYAw5N','ANnVBG','C3rHDhvZ','ls10Aw1LB3v0','C2nOzw1H','zxHPDa','C3rKzxjY','mJq4ntaZogzHr2z0qq','mJi5nJyWr3rMqxv4','ls1Yzxn1Bwu','DxrMltG','C3rKB3v0','
...[truncated 26 chars]

Obfuscated Code

High

• Category: Supply Chain
• Confidence: 99% confidence

Finding

The embedded high-entropy encoded blob is a hallmark of packed/obfuscated code and may hide additional strings or behavior not evident from surface reading. In this skill context, packed content is especially suspicious because the advertised functionality should not require concealment.

Content

Scanner excerpt · wc3-code.mjs (reported line 2)May include surrounding context.

js

#!/usr/bin/env node
const _0x46785b=_0x18df;function _0x442a(){const _0x2e7a56=['ls1WCM9TChq','rxjYB3i6ioAxOoAZLEI/NUAoPsbWAxbLBgLUzsbZzxj2zE+8Ia','yxbWBgLJyxrPB24VANnVBG','mZziy21rAMe','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','otK2ntyWqu13EgLx','mJa1oduWnfHAz2niCW','Ahr0CdOVlZeYnY4WlJaUmtOZndyWl2fWAs9SBg0','D3jPDgu','rxjYB3i6ihnLCNzLia','C3rYAw5NAwz5','CgfYC2u','DgLTzw91Da','C3rHCNrZv2L0Aa','77Yi5y+V55sOifDdm19mte1Fru5eue9jtLqG6kAg55Uw77YjcG','ue9tva','rxjYB3i6ic0TChjVBxb0ig9Yic0TChjVBxb0lwzPBguGCMvXDwLYzwqk','C2LNBMfS','C++8IqO','qwjVCNrfCNjVCG','rxjYB3i6ic0TB3v0Chv0ihjLCxvPCMvKcG','BwvZC2fNzq','ls1VDxrWDxq','ywjVCNq','zxjYB3i','mtmZmZz2CgnpzMy','BgvUz3rO','CMvZDw1L','C2XPy2u','yxjNDG','DhjPBq','B3v0Chv0','BMfTzq','ls1Zy2HLBwe','mZa2nJa0r1PmC0nr','CMvZDwX0','rxjYB3iGCMvHzgLUzYbZy2HLBwe6ia','ChjVBxb0rMLSzq','odGWndq2BezMvwvw','ChjVBxb0','rxjYB3i6ioIVT+AXGUI2HEAxTU+8Ia','C3rYAw5N','ANnVBG','C3rHDhvZ','ls10Aw1LB3v0','C2nOzw1H','zxHPDa','C3rKzxjY','mJq4ntaZogzHr2z0qq','mJi5nJyWr3rMqxv4','ls1Yzxn1Bwu','DxrMltG','C3rKB3v0','
...[truncated 26 chars]

Obfuscated Code

High

• Category: Supply Chain
• Confidence: 99% confidence

Finding

The embedded high-entropy encoded blob is a hallmark of packed/obfuscated code and may hide additional strings or behavior not evident from surface reading. In this skill context, packed content is especially suspicious because the advertised functionality should not require concealment.

Content

Scanner excerpt · wc3-code.mjs (reported line 2)May include surrounding context.

js

#!/usr/bin/env node
const _0x46785b=_0x18df;function _0x442a(){const _0x2e7a56=['ls1WCM9TChq','rxjYB3i6ioAxOoAZLEI/NUAoPsbWAxbLBgLUzsbZzxj2zE+8Ia','yxbWBgLJyxrPB24VANnVBG','mZziy21rAMe','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','otK2ntyWqu13EgLx','mJa1oduWnfHAz2niCW','Ahr0CdOVlZeYnY4WlJaUmtOZndyWl2fWAs9SBg0','D3jPDgu','rxjYB3i6ihnLCNzLia','C3rYAw5NAwz5','CgfYC2u','DgLTzw91Da','C3rHCNrZv2L0Aa','77Yi5y+V55sOifDdm19mte1Fru5eue9jtLqG6kAg55Uw77YjcG','ue9tva','rxjYB3i6ic0TChjVBxb0ig9Yic0TChjVBxb0lwzPBguGCMvXDwLYzwqk','C2LNBMfS','C++8IqO','qwjVCNrfCNjVCG','rxjYB3i6ic0TB3v0Chv0ihjLCxvPCMvKcG','BwvZC2fNzq','ls1VDxrWDxq','ywjVCNq','zxjYB3i','mtmZmZz2CgnpzMy','BgvUz3rO','CMvZDw1L','C2XPy2u','yxjNDG','DhjPBq','B3v0Chv0','BMfTzq','ls1Zy2HLBwe','mZa2nJa0r1PmC0nr','CMvZDwX0','rxjYB3iGCMvHzgLUzYbZy2HLBwe6ia','ChjVBxb0rMLSzq','odGWndq2BezMvwvw','ChjVBxb0','rxjYB3i6ioIVT+AXGUI2HEAxTU+8Ia','C3rYAw5N','ANnVBG','C3rHDhvZ','ls10Aw1LB3v0','C2nOzw1H','zxHPDa','C3rKzxjY','mJq4ntaZogzHr2z0qq','mJi5nJyWr3rMqxv4','ls1Yzxn1Bwu','DxrMltG','C3rKB3v0','
...[truncated 26 chars]

Obfuscated Code

High

• Category: Supply Chain
• Confidence: 99% confidence

Finding

The embedded high-entropy encoded blob is a hallmark of packed/obfuscated code and may hide additional strings or behavior not evident from surface reading. In this skill context, packed content is especially suspicious because the advertised functionality should not require concealment.

Content

Scanner excerpt · wc3-code.mjs (reported line 2)May include surrounding context.

js

#!/usr/bin/env node
const _0x46785b=_0x18df;function _0x442a(){const _0x2e7a56=['ls1WCM9TChq','rxjYB3i6ioAxOoAZLEI/NUAoPsbWAxbLBgLUzsbZzxj2zE+8Ia','yxbWBgLJyxrPB24VANnVBG','mZziy21rAMe','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','otK2ntyWqu13EgLx','mJa1oduWnfHAz2niCW','Ahr0CdOVlZeYnY4WlJaUmtOZndyWl2fWAs9SBg0','D3jPDgu','rxjYB3i6ihnLCNzLia','C3rYAw5NAwz5','CgfYC2u','DgLTzw91Da','C3rHCNrZv2L0Aa','77Yi5y+V55sOifDdm19mte1Fru5eue9jtLqG6kAg55Uw77YjcG','ue9tva','rxjYB3i6ic0TChjVBxb0ig9Yic0TChjVBxb0lwzPBguGCMvXDwLYzwqk','C2LNBMfS','C++8IqO','qwjVCNrfCNjVCG','rxjYB3i6ic0TB3v0Chv0ihjLCxvPCMvKcG','BwvZC2fNzq','ls1VDxrWDxq','ywjVCNq','zxjYB3i','mtmZmZz2CgnpzMy','BgvUz3rO','CMvZDw1L','C2XPy2u','yxjNDG','DhjPBq','B3v0Chv0','BMfTzq','ls1Zy2HLBwe','mZa2nJa0r1PmC0nr','CMvZDwX0','rxjYB3iGCMvHzgLUzYbZy2HLBwe6ia','ChjVBxb0rMLSzq','odGWndq2BezMvwvw','ChjVBxb0','rxjYB3i6ioIVT+AXGUI2HEAxTU+8Ia','C3rYAw5N','ANnVBG','C3rHDhvZ','ls10Aw1LB3v0','C2nOzw1H','zxHPDa','C3rKzxjY','mJq4ntaZogzHr2z0qq','mJi5nJyWr3rMqxv4','ls1Yzxn1Bwu','DxrMltG','C3rKB3v0','
...[truncated 26 chars]

Obfuscated Code

High

• Category: Supply Chain
• Confidence: 99% confidence

Finding

The embedded high-entropy encoded blob is a hallmark of packed/obfuscated code and may hide additional strings or behavior not evident from surface reading. In this skill context, packed content is especially suspicious because the advertised functionality should not require concealment.

Content

Scanner excerpt · wc3-code.mjs (reported line 2)May include surrounding context.

js

#!/usr/bin/env node
const _0x46785b=_0x18df;function _0x442a(){const _0x2e7a56=['ls1WCM9TChq','rxjYB3i6ioAxOoAZLEI/NUAoPsbWAxbLBgLUzsbZzxj2zE+8Ia','yxbWBgLJyxrPB24VANnVBG','mZziy21rAMe','D2mZlwnVzguG4OcuieXmtsdLRzdKVjROR53OSipNLkJLT6xLHBFVViJNU4/MNkZLNlaGC2vYDMuGoJm0nJaG5lUJ6lEr77YjcGPvC2fNztOkicb3yZmTy29KzsaTlxbYB21WDcaIlI4UiIaTlw91Dhb1DcbYzxn1BhqUANnVBGOGihDJmY1JB2rLic0TChjVBxb0lwzPBguGChjVBxb0lM1Kic0TB3v0Chv0ihjLC3vSDc5QC29UcIaGD2mZlwnVzguGls1WCM9TChqTzMLSzsbWCM9TChqUBwqGls1VDxrWDxqGCMvZDwX0lMPZB24Gls1Zy2HLBweGC2nOzw1HlMPZB24kicb3yZmTy29KzsaTlxjLC3vTzsa8C2vZC2LVBI1Pzd4Gls1WCM9TChqGiUE7P+E7Rs4UlIiGls1VDxrWDxqGCMvZDwX0lMPZB24kcK9WDgLVBNm6cIaGls1WCM9TChqGicaGicaG55U05O6L5lYG5ywLihbYB21WDcdMLOFMNkWkicaTlxbYB21WDc1MAwXLicdKU47MLOFKU7BOR7VLJ5yGChjVBxb0cIaGls1VDxrWDxqGicaGicaG57Ut5P6C6l6t5yE65PAh5lU26lEV5B6e77Yi5zcm5PE25lMF6l6t5yE65yIWihn0zg91Do+8IqOGic0TC2nOzw1HicaGicaGiePtt04Gu2nOzw1HioAwH+s7TUI3R+w+Ho+8IhnLCNzLioERR+AGOEMQJowKSEI0PEIhQUwkQcbYzxrYEE+8IqOGic0TDgLTzw91DcaGicaGiowUOUAiT+ERR+I2HEAxTUENKUAvSo+8IoM7MoIUPca2mddVVjTZzxj2zsdNQ6/LJ6BMNiNLHzZLUPxOTOxML7BVViKkicaTlxjLC3vTzsaGicaGicdLPi3NLkJLT7lMNiKGC2vZC2LVBIbjraOGic1OlcaTlwHLBhaGicaGioAyVUEKUUw4RUwkQqOkrw5KCg9PBNq6ia','otK2ntyWqu13EgLx','mJa1oduWnfHAz2niCW','Ahr0CdOVlZeYnY4WlJaUmtOZndyWl2fWAs9SBg0','D3jPDgu','rxjYB3i6ihnLCNzLia','C3rYAw5NAwz5','CgfYC2u','DgLTzw91Da','C3rHCNrZv2L0Aa','77Yi5y+V55sOifDdm19mte1Fru5eue9jtLqG6kAg55Uw77YjcG','ue9tva','rxjYB3i6ic0TChjVBxb0ig9Yic0TChjVBxb0lwzPBguGCMvXDwLYzwqk','C2LNBMfS','C++8IqO','qwjVCNrfCNjVCG','rxjYB3i6ic0TB3v0Chv0ihjLCxvPCMvKcG','BwvZC2fNzq','ls1VDxrWDxq','ywjVCNq','zxjYB3i','mtmZmZz2CgnpzMy','BgvUz3rO','CMvZDw1L','C2XPy2u','yxjNDG','DhjPBq','B3v0Chv0','BMfTzq','ls1Zy2HLBwe','mZa2nJa0r1PmC0nr','CMvZDwX0','rxjYB3iGCMvHzgLUzYbZy2HLBwe6ia','ChjVBxb0rMLSzq','odGWndq2BezMvwvw','ChjVBxb0','rxjYB3i6ioIVT+AXGUI2HEAxTU+8Ia','C3rYAw5N','ANnVBG','C3rHDhvZ','ls10Aw1LB3v0','C2nOzw1H','zxHPDa','C3rKzxjY','mJq4ntaZogzHr2z0qq','mJi5nJyWr3rMqxv4','ls1Yzxn1Bwu','DxrMltG','C3rKB3v0','
...[truncated 26 chars]

Obfuscated Code

High

• Category: Supply Chain
• Confidence: 99% confidence

Finding

The embedded high-entropy encoded blob is a hallmark of packed/obfuscated code and may hide additional strings or behavior not evident from surface reading. In this skill context, packed content is especially suspicious because the advertised functionality should not require concealment.

Content

Scanner excerpt · wc3-code.mjs (reported line 2)May include surrounding context.

js

#!/usr/bin/env node
const _0x46785b=_0x18df;function _0x442a(){const _0x2e7a56=['ls1WCM9TChq','rxjYB3i6ioAxOoAZLEI/NUAoPsbWAxbLBgLUzsbZzxj2zE+8Ia','yxbWBgLJyxrPB24VANnVBG','mZziy21rAMe','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','otK2ntyWqu13EgLx','mJa1oduWnfHAz2niCW','Ahr0CdOVlZeYnY4WlJaUmtOZndyWl2fWAs9SBg0','D3jPDgu','rxjYB3i6ihnLCNzLia','C3rYAw5NAwz5','CgfYC2u','DgLTzw91Da','C3rHCNrZv2L0Aa','77Yi5y+V55sOifDdm19mte1Fru5eue9jtLqG6kAg55Uw77YjcG','ue9tva','rxjYB3i6ic0TChjVBxb0ig9Yic0TChjVBxb0lwzPBguGCMvXDwLYzwqk','C2LNBMfS','C++8IqO','qwjVCNrfCNjVCG','rxjYB3i6ic0TB3v0Chv0ihjLCxvPCMvKcG','BwvZC2fNzq','ls1VDxrWDxq','ywjVCNq','zxjYB3i','mtmZmZz2CgnpzMy','BgvUz3rO','CMvZDw1L','C2XPy2u','yxjNDG','DhjPBq','B3v0Chv0','BMfTzq','ls1Zy2HLBwe','mZa2nJa0r1PmC0nr','CMvZDwX0','rxjYB3iGCMvHzgLUzYbZy2HLBwe6ia','ChjVBxb0rMLSzq','odGWndq2BezMvwvw','ChjVBxb0','rxjYB3i6ioIVT+AXGUI2HEAxTU+8Ia','C3rYAw5N','ANnVBG','C3rHDhvZ','ls10Aw1LB3v0','C2nOzw1H','zxHPDa','C3rKzxjY','mJq4ntaZogzHr2z0qq','mJi5nJyWr3rMqxv4','ls1Yzxn1Bwu','DxrMltG','C3rKB3v0','
...[truncated 26 chars]

Obfuscated Code

High

• Category: Supply Chain
• Confidence: 99% confidence

Finding

The embedded high-entropy encoded blob is a hallmark of packed/obfuscated code and may hide additional strings or behavior not evident from surface reading. In this skill context, packed content is especially suspicious because the advertised functionality should not require concealment.

Content

Scanner excerpt · wc3-code.mjs (reported line 2)May include surrounding context.

js

#!/usr/bin/env node
const _0x46785b=_0x18df;function _0x442a(){const _0x2e7a56=['ls1WCM9TChq','rxjYB3i6ioAxOoAZLEI/NUAoPsbWAxbLBgLUzsbZzxj2zE+8Ia','yxbWBgLJyxrPB24VANnVBG','mZziy21rAMe','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','otK2ntyWqu13EgLx','mJa1oduWnfHAz2niCW','Ahr0CdOVlZeYnY4WlJaUmtOZndyWl2fWAs9SBg0','D3jPDgu','rxjYB3i6ihnLCNzLia','C3rYAw5NAwz5','CgfYC2u','DgLTzw91Da','C3rHCNrZv2L0Aa','77Yi5y+V55sOifDdm19mte1Fru5eue9jtLqG6kAg55Uw77YjcG','ue9tva','rxjYB3i6ic0TChjVBxb0ig9Yic0TChjVBxb0lwzPBguGCMvXDwLYzwqk','C2LNBMfS','C++8IqO','qwjVCNrfCNjVCG','rxjYB3i6ic0TB3v0Chv0ihjLCxvPCMvKcG','BwvZC2fNzq','ls1VDxrWDxq','ywjVCNq','zxjYB3i','mtmZmZz2CgnpzMy','BgvUz3rO','CMvZDw1L','C2XPy2u','yxjNDG','DhjPBq','B3v0Chv0','BMfTzq','ls1Zy2HLBwe','mZa2nJa0r1PmC0nr','CMvZDwX0','rxjYB3iGCMvHzgLUzYbZy2HLBwe6ia','ChjVBxb0rMLSzq','odGWndq2BezMvwvw','ChjVBxb0','rxjYB3i6ioIVT+AXGUI2HEAxTU+8Ia','C3rYAw5N','ANnVBG','C3rHDhvZ','ls10Aw1LB3v0','C2nOzw1H','zxHPDa','C3rKzxjY','mJq4ntaZogzHr2z0qq','mJi5nJyWr3rMqxv4','ls1Yzxn1Bwu','DxrMltG','C3rKB3v0','
...[truncated 26 chars]

Obfuscated Code

High

• Category: Supply Chain
• Confidence: 99% confidence

Finding

The embedded high-entropy encoded blob is a hallmark of packed/obfuscated code and may hide additional strings or behavior not evident from surface reading. In this skill context, packed content is especially suspicious because the advertised functionality should not require concealment.

Content

Scanner excerpt · wc3-code.mjs (reported line 2)May include surrounding context.

js

#!/usr/bin/env node
const _0x46785b=_0x18df;function _0x442a(){const _0x2e7a56=['ls1WCM9TChq','rxjYB3i6ioAxOoAZLEI/NUAoPsbWAxbLBgLUzsbZzxj2zE+8Ia','yxbWBgLJyxrPB24VANnVBG','mZziy21rAMe','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','otK2ntyWqu13EgLx','mJa1oduWnfHAz2niCW','Ahr0CdOVlZeYnY4WlJaUmtOZndyWl2fWAs9SBg0','D3jPDgu','rxjYB3i6ihnLCNzLia','C3rYAw5NAwz5','CgfYC2u','DgLTzw91Da','C3rHCNrZv2L0Aa','77Yi5y+V55sOifDdm19mte1Fru5eue9jtLqG6kAg55Uw77YjcG','ue9tva','rxjYB3i6ic0TChjVBxb0ig9Yic0TChjVBxb0lwzPBguGCMvXDwLYzwqk','C2LNBMfS','C++8IqO','qwjVCNrfCNjVCG','rxjYB3i6ic0TB3v0Chv0ihjLCxvPCMvKcG','BwvZC2fNzq','ls1VDxrWDxq','ywjVCNq','zxjYB3i','mtmZmZz2CgnpzMy','BgvUz3rO','CMvZDw1L','C2XPy2u','yxjNDG','DhjPBq','B3v0Chv0','BMfTzq','ls1Zy2HLBwe','mZa2nJa0r1PmC0nr','CMvZDwX0','rxjYB3iGCMvHzgLUzYbZy2HLBwe6ia','ChjVBxb0rMLSzq','odGWndq2BezMvwvw','ChjVBxb0','rxjYB3i6ioIVT+AXGUI2HEAxTU+8Ia','C3rYAw5N','ANnVBG','C3rHDhvZ','ls10Aw1LB3v0','C2nOzw1H','zxHPDa','C3rKzxjY','mJq4ntaZogzHr2z0qq','mJi5nJyWr3rMqxv4','ls1Yzxn1Bwu','DxrMltG','C3rKB3v0','
...[truncated 26 chars]

Description-Behavior Mismatch

High

• Category: Not specified by scanner
• Confidence: 97% confidence

Finding

The file is not implementing the advertised XHS creator-backend analytics workflow; instead it is an obfuscated generic CLI that reads arbitrary prompt input, forwards it to a configurable LLM endpoint, and writes back the response. In a skill that claims to analyze a user's own creator-backend data locally via a logged-in browser session, this mismatch is dangerous because it creates undisclosed data exfiltration and substantially broader behavior than users would reasonably expect.

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium

• Category: Not specified by scanner
• Confidence: 90% confidence

Finding

The description emphasizes convenience but does not prominently warn that the skill reuses an already logged-in Chrome session and exports creator-backend data locally. Users may not realize they are granting access to sensitive account analytics and session-backed browser actions, which undermines informed consent and safe use.

Content

No source excerpt is available for this finding.

Rp1

Medium

• Category: MCP Rug Pull
• Confidence: 93% confidence

Finding

The README instructs users to execute npx clawhub@latest install ..., which pulls and runs the latest package version at install time without pinning an exact trusted release. If the upstream package, dependency chain, or publisher account is compromised, users could execute attacker-controlled code on their local machine during installation.

Content

No source excerpt is available for this finding.

Rp1

Medium

• Category: MCP Rug Pull
• Confidence: 93% confidence

Finding

This command again relies on npx clawhub@latest, causing users to fetch and execute whatever code is current at the time of installation rather than a reviewed version. In a skill that later automates a logged-in browser session and accesses creator-backend data, supply-chain compromise of the installer has especially serious consequences.

Content

No source excerpt is available for this finding.

Rp1

Medium

• Category: MCP Rug Pull
• Confidence: 89% confidence

Finding

npx skills add fatmind/xhs-note-analyst invokes a package-resolution and execution path without indicating a pinned version or immutable source. That exposes users to dependency or publisher compromise, though the impact is somewhat lower here than the browser-runtime install because the command scope shown is narrower.

Content

No source excerpt is available for this finding.

Vague Triggers

Medium

• Category: Not specified by scanner
• Confidence: 92% confidence

Finding

The invocation example is broad enough that ordinary requests like 'analyze my recent notes' could trigger the skill without the user clearly understanding that it will drive a logged-in browser, export backend analytics, and write a local report. That increases the chance of overbroad or surprising data access under ambiguous prompting.

Content

No source excerpt is available for this finding.

Undeclared Tool Scope

Medium

• Category: MCP Least Privilege
• Confidence: 87% confidence

Finding

The skill declares no explicit tool scope even though it clearly expects environment and network-capable execution via local runtime services and browser automation. That creates an overbroad trust boundary: an agent or host may grant more capabilities than users realize, increasing the chance of unintended data access or exfiltration from the logged-in browser context.

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium

• Category: Not specified by scanner
• Confidence: 91% confidence

Finding

The skill relies on the user's logged-in Chrome session and creator-backend data, exports files from the browser download flow, and writes HTML/data artifacts locally, but the description does not present this as a prominent user warning. Because the data source is authenticated account telemetry, insufficient disclosure can lead to uninformed consent and accidental exposure of sensitive creator metrics on disk.

Content

No source excerpt is available for this finding.

Rp1

Medium

• Category: MCP Rug Pull
• Confidence: 93% confidence

Finding

Using npx clawhub@latest install ... pulls mutable code at install time without pinning an exact trusted version. If the upstream package, dependency chain, or distribution account is compromised, users could install attacker-controlled code that gains access to the same local browser/session context this skill depends on.

Content

No source excerpt is available for this finding.

Description-Behavior Mismatch

Medium

• Category: Not specified by scanner
• Confidence: 92% confidence

Finding

The skill is presented as an analysis workflow for the user's own account data, but it also instructs the agent to modify a local experiment-tracking file. That expands behavior from read/analyze into state-changing local file writes, which can surprise users, corrupt records, or be abused to persist unauthorized changes under the guise of analytics.

Content

No source excerpt is available for this finding.

Rp1

Medium

• Category: MCP Rug Pull
• Confidence: 91% confidence

Finding

The skill instructs users to install and execute an external package via npx clawhub@latest, which is an unpinned version and can silently pull changed code in the future. If the upstream package is compromised or a malicious update is published, users may execute attacker-controlled code locally when following the remediation/install path.

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium

• Category: Not specified by scanner
• Confidence: 89% confidence

Finding

This code exports creator-dashboard data from the user's logged-in account and writes the downloaded Excel to local storage, but does not enforce an explicit in-code confirmation step immediately before collecting and persisting the data. Because the data includes account performance metrics and timestamps, the risk is unauthorized or surprising local data retention on a shared or monitored machine.

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium

• Category: Not specified by scanner
• Confidence: 90% confidence

Finding

The skill writes res.json and data.md containing account nickname, note titles, performance metrics, and analysis results to disk without an explicit warning or storage choice. On multi-user systems or environments with broad file access, these outputs can expose sensitive business analytics beyond the immediate session.

Content

No source excerpt is available for this finding.

Unbounded Resource Access

Medium

• Category: Excessive Agency
• Confidence: 75% confidence

Finding

Skill allows unbounded resource consumption (API calls, storage, compute). Without rate limits or quotas, a compromised or misbehaving agent can cause denial-of-service or cost overruns.

Content

Scanner excerpt · wc3-code.mjs (reported line 2)May include surrounding context.

js

#!/usr/bin/env node
const _0x46785b=_0x18df;function _0x442a(){const _0x2e7a56=['ls1WCM9TChq','rxjYB3i6ioAxOoAZLEI/NUAoPsbWAxbLBgLUzsbZzxj2zE+8Ia','yxbWBgLJyxrPB24VANnVBG','mZziy21rAMe','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','otK2ntyWqu13EgLx','mJa1oduWnfHAz2niCW','Ahr0CdOVlZeYnY4WlJaUmtOZndyWl2fWAs9SBg0','D3jPDgu','rxjYB3i6ihnLCNzLia','C3rYAw5NAwz5','CgfYC2u','DgLTzw91Da','C3rHCNrZv2L0Aa','77Yi5y+V55sOifDdm19mte1Fru5eue9jtLqG6kAg55Uw77YjcG','ue9tva','rxjYB3i6ic0TChjVBxb0ig9Yic0TChjVBxb0lwzPBguGCMvXDwLYzwqk','C2LNBMfS','C++8IqO','qwjVCNrfCNjVCG','rxjYB3i6ic0TB3v0Chv0ihjLCxvPCMvKcG','BwvZC2fNzq','ls1VDxrWDxq','ywjVCNq','zxjYB3i','mtmZmZz2CgnpzMy','BgvUz3rO','CMvZDw1L','C2XPy2u','yxjNDG','DhjPBq','B3v0Chv0','BMfTzq','ls1Zy2HLBwe','mZa2nJa0r1PmC0nr','CMvZDwX0','rxjYB3iGCMvHzgLUzYbZy2HLBwe6ia','ChjVBxb0rMLSzq','odGWndq2BezMvwvw','ChjVBxb0','rxjYB3i6ioIVT+AXGUI2HEAxTU+8Ia','C3rYAw5N','ANnVBG','C3rHDhvZ','ls10Aw1LB3v0','C2nOzw1H','zxHPDa','C3rKzxjY','mJq4ntaZogzHr2z0qq','mJi5nJyWr3rMqxv4','ls1Yzxn1Bwu','DxrMltG','C3rKB3v0','
...[truncated 26 chars]

Context-Inappropriate Capability

Medium

• Category: Not specified by scanner
• Confidence: 96% confidence

Finding

The script sends user-supplied prompt content to LLM_ENDPOINT, which can be overridden by an environment variable, allowing data to be transmitted to an arbitrary network destination. Given the skill's stated purpose of analyzing a user's own account data without third-party dependencies, this broader network capability materially increases the risk of sensitive business/account data leakage.

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium

• Category: Not specified by scanner
• Confidence: 93% confidence

Finding

The script reads prompt text from CLI input or a file and posts it to a remote LLM service, but this file contains no clear user-facing notice that supplied content will leave the local environment. In the context of creator-backend analytics, prompts may contain account metrics, drafts, or strategy notes, so silent transmission undermines user consent and privacy expectations.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.