Xiaohongshu Creator Marketplace (Pugongying) Creator Search API

• Analyzed: May 10, 2026, 6:43 AM
• Findings: 1
• Version: 1.0.0
• Hash: e5009d8591dd83be3217e04588baa425f4a6193a3703788f9c1e9ad1ddd70469
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle is a standard API wrapper for the JustOneAPI service, designed to search for creators on the Xiaohongshu (Pugongying) platform. The implementation in `bin/run.mjs` is a straightforward Node.js script that uses the native `fetch` API to communicate with `api.justoneapi.com`. The `SKILL.md` file provides clear instructions for the AI agent and includes security-conscious guidance, such as explicitly telling the agent not to expose the `JUST_ONE_API_TOKEN` in chat logs or screenshots. No evidence of malicious intent, data exfiltration, or harmful prompt injection was found.