小红书

小红书自动化运营工具-支持：搜索笔记、查看笔记详情及评论、浏览推荐流、发布图文笔记。 当用户提及 xiaohongshu、小红书、RedNote，或需要在该平台进行内容调研/发布时使用。

Security Scan

The skill's code, instructions, and requirements are consistent with an automation client that talks to a local xiaohongshu-mcp server; nothing requests unrelated credentials or system-wide privileges.

Purpose & Capability

Name/description (search, view, browse, publish) match the included Python client and shell helper. Required pieces (requests library, local MCP server) are coherent with the stated purpose. The publish helper for packaging is a developer tool and not required at runtime.

Instruction Scope

SKILL.md instructs the agent/user to interact only with a local MCP server at http://localhost:18060, to install requests, and to follow SETUP.md. The runtime client only calls local endpoints and prints JSON; it does not read other system files or environment variables. The SETUP process does require running a third-party binary (MCP) and QR login, which is expected for this functionality.

Install Mechanism

This skill is instruction-only (no automated install). SETUP.md directs users to download MCP binaries from the GitHub Releases page of xpzouying/xiaohongshu-mcp — a plausible source for this project. Downloading and running third-party binaries carries standard trust risk; the registry package itself does not automatically fetch arbitrary URLs or extract archives.

Credentials

No environment variables, secrets, or config paths are requested by the skill. Account login is handled by the local MCP server via QR-code login as documented; no hidden credential exfiltration is present in the Python client.

Persistence & Privilege

Skill does not request always:true, does not modify other skills or system-wide configuration, and contains only a local client and a developer publish script. The client interacts with a local service and does not attempt to install persistent background services itself.

Assessment

This skill is internally consistent with its purpose, but it relies on running a third-party MCP binary that will control your Xiaohongshu session (login via QR). Before installing or running: 1) review and trust the upstream GitHub repo/releases (verify checksums if provided); 2) run the MCP binary in an isolated environment or with a non-critical account if you are cautious; 3) note that the MCP server can perform actions on your account (including publishing), so avoid using your primary account unless you trust the binary; and 4) follow SETUP.md to install only the documented tools (pip requests) and avoid running unexpected binaries or scripts.

小红书 MCP

通过内置的 Python 客户端与本地 xpzouying/xiaohongshu-mcp 服务器通信，自动化小红书操作。

前置条件：pip install requests 并确保 MCP 服务器正在运行。首次安装请参阅 SETUP.md。

快速参考

python scripts/xhs_client.py status
python scripts/xhs_client.py search "美食推荐"
python scripts/xhs_client.py search "美食" --sort "最多点赞" --type "图文" --time "一周内"
python scripts/xhs_client.py detail <feed_id> <xsec_token> --comments
python scripts/xhs_client.py feeds
python scripts/xhs_client.py publish "标题" "正文内容" "图片链接1,图片链接2" --tags "标签1,标签2"

所有命令均支持 --json 参数以输出原始 JSON 数据。

工作流：市场调研

进度：
- [ ] 第 1 步：验证服务器连接
- [ ] 第 2 步：搜索目标关键词
- [ ] 第 3 步：获取笔记详情
- [ ] 第 4 步：分析调研结果

第 1 步：验证服务器连接

python scripts/xhs_client.py status

如果未连接，请参阅 SETUP.md。在状态显示已登录之前，请勿继续后续步骤。

第 2 步：搜索目标关键词

python scripts/xhs_client.py search "户外电源" --sort "最多点赞" --json

筛选参数：--sort（综合/最新/最多点赞/最多评论/最多收藏）、--type（不限/视频/图文）、--time（不限/一天内/一周内/半年内）。

第 3 步：获取笔记详情

使用搜索结果中的 feed_id 和 xsec_token：

python scripts/xhs_client.py detail "<feed_id>" "<xsec_token>" --comments --json

第 4 步：分析调研结果

查看笔记内容、互动数据（点赞、收藏、评论）以及评论区情感倾向。

工作流：发布内容

进度：
- [ ] 第 1 步：验证服务器连接
- [ ] 第 2 步：准备图片和文案
- [ ] 第 3 步：发布笔记
- [ ] 第 4 步：验证发布结果

第 1 步：验证服务器连接

python scripts/xhs_client.py status

第 2 步：准备图片和文案

确保图片链接可公开访问。准备标题（建议不超过 20 个字符）、正文内容和可选标签。

第 3 步：发布笔记

python scripts/xhs_client.py publish "标题" "正文内容" "https://img1.jpg,https://img2.jpg" --tags "标签1,标签2"

第 4 步：验证发布结果

搜索已发布的笔记以确认上线：

python scripts/xhs_client.py search "标题" --sort "最新"

注意事项

• 会话失效：MCP 服务器运行期间，请勿在其他任何网页浏览器中登录同一小红书账号。
• 服务器必须运行：所有命令都需要 MCP 服务器在 http://localhost:18060 上运行。
• 频率限制：请适当控制请求间隔，避免触发反自动化机制。