Security audit
Security checks for vulnerabilities and agentic risk
This skill is a sparse Xiaohongshu ecommerce helper stub with no evidence of dangerous file, network, credential, persistence, or privilege behavior.
Review the sparse Chinese-only documentation before installing. The current artifact appears low risk, but it is also mostly a placeholder, so users should not expect real Xiaohongshu automation unless future versions add clearly documented integrations and permissions.
The natural-language content in the skill description, features, maintenance, and version history is presented only in Chinese. Under the policy, forcing a specific language without user opt-in or justification is a natural-language policy violation.
The skill description is entirely presented in Chinese and names a China-specific platform, which implies a fixed language/locale context. There is no accompanying natural-language indication that users can choose another language or that the Chinese-only behavior is an intentional, documented locale restriction.
No suspicious patterns detected.
