Xiaohongshu Creator Marketplace (Pugongying) Similar Creators API

• Analyzed: May 10, 2026, 6:43 AM
• Findings: 1
• Version: 1.0.0
• Hash: 892e7e9e9338768432e190a23bc26ee93994cda87ff710b84183f2503c2b37e8
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill is a standard API wrapper for the JustOneAPI service, specifically targeting the Xiaohongshu Creator Marketplace (Pugongying) endpoint. The execution logic in `bin/run.mjs` is straightforward, using standard Node.js APIs to perform authorized GET requests to a legitimate domain (api.justoneapi.com). There are no signs of data exfiltration, malicious command execution, or prompt injection; the documentation in `SKILL.md` even includes proactive security advice regarding the protection of API tokens.