ClawHub
Back to skill

Security audit

Xiaohongshu (RedNote) Keyword Suggestions API

Security checks across malware telemetry and agentic risk

Overview

This is a focused API wrapper, but it handles the required API token in ways that can expose the credential through command arguments and request URLs.

Review before installing if this token has meaningful account access. Use it only where process arguments and outbound request URLs are not logged, prefer a short-lived or low-scope JustOneAPI token, and consider modifying the helper to read JUST_ONE_API_TOKEN directly and use an Authorization header if the API supports it.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (1)

Missing User Warnings

Medium
Confidence
98% confidence
Finding
The skill defines the API access token as a query parameter and later appends all query parameters directly into the request URL. Secrets in URLs are routinely exposed through logs, browser/history layers, proxy infrastructure, monitoring tools, and error telemetry, so the token may be disclosed beyond the intended recipient. In this skill context, the risk is real because the tool is explicitly designed to transmit credentials to a third-party API service on every request.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

Detected: suspicious.secret_argv_exposure

Instructions pass high-value credentials through process argv.

Critical
Code
suspicious.secret_argv_exposure
Location
SKILL.md:41