Security audit
Security checks for vulnerabilities and agentic risk
The skill’s social-media automation purpose is clear, but it can create persistent schedules and operate a Xiaohongshu account with broad triggers and limited user-control safeguards.
Review this skill before installing. Use it only if you want Xiaohongshu account automation, and require explicit approval before it writes schedules, creates cron jobs, opens a logged-in account, submits posts, or collects analytics. Confirm how to list, pause, and delete scheduled tasks and saved content plans.
The trigger phrases are broad enough to activate on ordinary requests like '帮我写小红书' or '发小红书', which could load an automation skill when a user only wanted drafting help. In this skill, unintended activation is more dangerous because the capability set includes browser automation, scheduling, file persistence, and post-publication actions, increasing the chance of surprise automated behavior.
The skill describes writing schedules to local storage, creating cron jobs, opening and operating a Xiaohongshu account in the browser, and returning later to collect engagement metrics, but it does not clearly disclose these persistent and account-affecting behaviors to the user at the point of use. This is risky because users may unknowingly authorize ongoing automated actions, local retention of content plans, and monitoring of account activity, which can create privacy, consent, and platform-compliance issues.
No suspicious patterns detected.
