rednote(xiaohongshu,xhs)

ReviewAudited by ClawScan on May 10, 2026.

Overview

The skill matches its Rednote purpose, but it can use your logged-in account to publish, comment, follow, like, and save content while storing session cookies locally.

Install only if you are comfortable letting the skill operate your Rednote account through a browser session. Keep rednote_cookies.json private, review all publish/comment/follow/like actions before they run, and consider adding manual approval steps for any public or account-mutating action.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

ConcernHigh Confidence

ASI02: Tool Misuse and Exploitation

What this means

If invoked on the wrong input or by an over-eager agent, the skill could publish or engage from the user's Rednote account.

Why it was flagged

These documented commands can mutate a logged-in social account and publish public content. The artifacts show direct execution paths but do not show an explicit confirmation or preview step before these high-impact actions.

Skill content

- **Comment on Note**: `python scripts/comment_note.py <NOTE_URL> <COMMENT_TEXT>`
- **Follow User**: `python scripts/follow_user.py <NOTE_URL>`
- **Publish Note**: `python scripts/publish_note.py --image-urls <IMG1 [IMG2 ...]> --title <TITLE> --content <CONTENT> --tags <TAG1 [TAG2 ...]>`

Recommendation

Require explicit user approval before publish, comment, follow, like, or collect actions; add a preview/dry-run mode and validate that note URLs are intended xiaohongshu.com URLs.

NoteHigh Confidence

ASI03: Identity and Privilege Abuse

What this means

Anyone or any process that can read this file may be able to reuse the user's Rednote session.

Why it was flagged

The skill saves Playwright browser storage state, including login/session cookies, to a local file for later authenticated use.

Skill content

cookies_file = "rednote_cookies.json"
storage_state = context.storage_state(path=cookies_file)

Recommendation

Store the cookie file securely, do not share it, delete it when no longer needed, and declare this credential/config path clearly in metadata.

NoteHigh Confidence

ASI04: Agentic Supply Chain Vulnerabilities

What this means

The user must trust the package source and the browser-driver installation performed in their environment.

Why it was flagged

The skill relies on manual, unpinned dependency installation rather than a reviewed install spec or lockfile.

Skill content

- Playwright (install with `pip install playwright`)
- Playwright drivers (install with `playwright install`)

Recommendation

Provide a pinned install spec or lockfile, and users should install dependencies only from trusted package sources.