ClawHub

小红书数据分析

v0.1.2

Analyze Xiaohongshu (Little Red Book) market data including topic trends, blogger performance, note engagement, and competitive landscape. Use when user asks...

⭐ 0· 3·0 current·0 all-time
by@sxcvicky
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
medium confidence
✓
Purpose & Capability
Name/description match the declared requirements: the skill queries an XHS-focused data API and only requests XHS_API_KEY as the credential needed to access that API.
✓
Instruction Scope
SKILL.md confines actions to asking user goals, consulting local reference docs, and calling the documented API endpoints (base URL is provided). It does not instruct the agent to read unrelated files, system credentials, or exfiltrate local data.
✓
Install Mechanism
No install spec and no code files (instruction-only). This minimizes disk-write/execution risk; runtime network calls to the remote API are the only active surface.
ℹ
Credentials
Only one env var (XHS_API_KEY) is required which is proportionate. However the base URL is a third‑party backend (a tcloudbase.sh.run subdomain), not an official Xiaohongshu domain — verify what service you are giving this API key to and that the key scope is limited.
✓
Persistence & Privilege
always:false and no installation steps that modify other skills or system settings. The skill does not request permanent elevated privileges.
Assessment
This skill is coherent but exercises an external API. Before installing: (1) Confirm what XHS_API_KEY represents and which organization runs https://xhsnative-backend-171452-7-1367409358.sh.run.tcloudbase.com; do not reuse high-privilege credentials. (2) Prefer issuing a limited-scope/test API key. (3) If you need assurance, ask the publisher for a homepage or contact and for privacy/processing details. (4) Because the skill makes network requests, avoid sending sensitive PII unless you trust the backend service.

Like a lobster shell, security has layers — review code before you run it.

latestvk971dhkqh9v1e8d47hmarpsy4n84kfqa

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

📊 Clawdis
EnvXHS_API_KEY
Primary envXHS_API_KEY

Comments