XHS Video Downloader

PassAudited by ClawScan on May 10, 2026.

Overview

This appears to be a straightforward Xiaohongshu video downloader, with expected browser/network/file-write behavior and a minor dependency/provenance caveat.

Before installing, confirm you are comfortable with the agent opening Xiaohongshu pages, extracting video URLs from page HTML, and saving files locally. If using the Python script, install requests from a trusted source and keep downloads limited to expected Xiaohongshu/xhscdn content.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The agent may open the Xiaohongshu page, inspect its rendered HTML, and save the extracted video to your computer.

Why it was flagged

The skill directs the agent to use browser automation and a shell download command. This is expected for a video downloader, but it gives the agent practical ability to browse a page, inspect HTML, and write a downloaded file.

Skill content
Uses browser automation to load the page ... Extracts the real CDN video URL ... curl -L -o output.mp4 "<VIDEO_URL>"
Recommendation

Use it only with intended Xiaohongshu URLs and review the download destination before allowing the file write.

What this means

Running the Python helper may require installing a third-party package into your local Python environment.

Why it was flagged

The helper script depends on the external Python requests package, installed manually and without a pinned version. This is common for simple helper scripts but is still a dependency trust consideration.

Skill content
Requirements:
    - requests: pip install requests
Recommendation

Install dependencies from a trusted package source, preferably in a virtual environment, and consider pinning the dependency version.