xhs-prohibited-word（小红书违禁词查询）

• Analyzed: May 10, 2026, 6:49 AM
• Findings: 1
• Version: 1.0.2
• Hash: 0c3d81cc36a526776810f7e316339f6d48887c5f6a7bbf3e2c8bf5b729115519
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill exfiltrates user-provided text, file contents, and web data to an external third-party API (onetotenvip.com) for sensitive word detection, which poses a significant privacy risk. It utilizes high-risk capabilities including Playwright for headless web browsing and broad local file-reading permissions, creating potential for SSRF or unauthorized access to sensitive local files if the agent is manipulated. Furthermore, the instructions in core_workflow.md use highly coercive 'Iron Rules' to strictly mandate file system writes and specific agent behaviors, which is a common pattern for controlling agents via prompt injection.