小红书运营助手

自媒体博主必备,获取小红书官方帐号最新笔记,热点话题;对小红书帐号和笔记进行打分评价

Security Scan

The skill's files, instructions, and runtime requirements align with its stated purpose (fetching and decoding third‑party XHS aggregator data and scoring notes); nothing in the bundle requests unrelated credentials or escalated privileges, but it does call an external, non‑official backend you should trust before use.

Purpose & Capability

The name/description (小红书运营助手) matches the included endpoints and the small decryption helper. One noteworthy point: the skill talks to a third‑party domain (https://qianhaistonepark.site/) rather than an official XHS API — this is plausible for an aggregator but is an external dependency you should consider trustworthy before use.

Instruction Scope

SKILL.md directs the agent to query the documented endpoints, paginate/filter results, and use the included scripts/tool.py xor_decrypt() to decode some fields. Instructions do not ask the agent to read arbitrary system files, environment variables, or other unrelated data.

Install Mechanism

No install spec — instruction-only with a small bundled Python script. Required binaries (curl, python) are appropriate for making HTTP calls and running the included decryptor. No archive downloads or remote installers are used.

Credentials

The skill requests no environment variables, no credentials, and no config paths. The included tool uses a hardcoded base_key salt inside the script to derive a time‑based XOR key — this is self-contained and consistent with the stated lightweight encryption used by the backend.

Persistence & Privilege

The skill is not force‑included (always: false) and does not request system or cross‑skill configuration changes. It can be invoked by the agent normally (disable-model-invocation: false), which is the platform default.

Assessment

This skill appears coherent and implements what it claims: it calls a third‑party API (qianhaistonepark.site) and uses the bundled Python script to XOR‑decrypt some returned fields. Before installing, confirm you trust that external domain (responses and traffic will go to it). Inspect or run scripts/tool.py locally if you want to verify the decryption logic (it contains a hardcoded salt 'sardinesinqianhai' used to derive the key). Do not send any sensitive credentials or private data through the skill; if you need strong guarantees, ask the author for the data retention/privacy policy or host your own trusted data source.

自媒体博主必备

• 获取小红书官方帐号最新笔记,也包括了网易蛋仔派对,POPMART泡泡玛特等这类官方品牌笔记
• 获取热点话题,包括话题简介.运营人员可根据热点话题进行二次创作,以获取更多的关注
• 对帐号和笔记进行打分评价,包括用户昵称,简介,笔记标题和内容

描述

1. 官方笔记查询(/xhs/get_op_note_list)：支持分页、按账号精确匹配、按类型精确匹配、按描述模糊搜索（不区分大小写）。
2. 官方帐号列表(/xhs/get_op_account_list)：返回所有运营账号及其描述，不分页、无过滤。
3. 热点话题列表(/xhs/get_hot_topic):返回平台热点话题,最多40条,无需分页。
4. 小红书评分标准提示词接口(/xhs/get_score_prompt):返回用户昵称,简介和笔记标题,内容的评价标准。

注意事项

1. 严禁编造：如果API返回数据为空或报错，请明确告知用户“暂未获取到数据”，禁止自行生成虚假的热点话题或评分。
2. 某些返回的json字段经过加密,需要用脚本'scripts/tool.py'中的xor_decrypt()进行解码

基础 URL

默认：https://qianhaistonepark.site/

1.获取小红书官方笔记列表和内容接口

• 返回数据按时间从新到旧排序
• 如果没有指定笔记类型(note_type)和笔记账号(note_account),则返回最新的官方笔记
• 由于小红书笔记详情页必须从帐号首页跳到详情页,不要使用id拼url直接跳转,只能用account_url跳到帐号首页

GET /xhs/get_op_note_list

• 请求参数（全部可选）

参数	类型	默认值	说明
page	integer	1	页码，从 1 开始 ,参数最大为 100，超出会被服务端限制为 100。
page_size	integer	20	每页记录数，最大 100
note_account	string	-	笔记账号，精确匹配 ,帐号可由/xhs/get_op_account_list接口获取,中文使用URL编码
note_type	string	-	笔记类型，精确匹配,包括创作类,综合类,安全类,周边类,美妆类,生活类,学习求职类,娱乐类,运动类,旅行类,摄影类,艺术类,直播带货类,家居类,宠物类,运营类,美食类,公益类,数码类,汽车类,游戏类,中文使用URL编码
note_desc	string	-	笔记描述，模糊包含匹配（不区分大小写）,中文使用URL编码;模糊匹配是基于内存的字符串包含，性能与缓存数据量成正比（通常 < 10 万条无压力）。

• 响应格式

JSON 数组，每个元素包含以下字段：

{
  "note_id": "string",
  "note_type": "string",
  "note_account": "string",
  "account_url": "string",
  "note_title": "string or null",
  "note_desc": "string or null",
  "note_date": "string or null"
}

• curl 示例

# 基础分页查询（第一页，每页 10 条）
curl "https://qianhaistonepark.site/xhs/get_op_note_list?page=1&page_size=10"
# 按账号精确查询
curl "https://qianhaistonepark.site/xhs/get_op_note_list?note_account=%40%E8%96%AF%E9%98%9F%E9%95%BF"
# 按类型查询 + 分页
curl "https://qianhaistonepark.site/xhs/get_op_note_list?note_type=%E5%AE%98%E6%96%B9%E5%8F%B7&page=1&page_size=20"
# 按描述模糊搜索（包含“旅游”）
curl "https://qianhaistonepark.site/xhs/get_op_note_list?note_desc=%E6%97%85%E6%B8%B8"
# 组合条件
curl "https://qianhaistonepark.site/xhs/get_op_note_list?note_account=%40%E8%96%AF%E9%98%9F%E9%95%BF&note_type=%E5%AE%98%E6%96%B9%E5%8F%B7&note_desc=%E9%BB%91%E5%AE%A2%E6%9D%BE&page=1&page_size=5"

---

2.获取小红书所有官方账号列表接口

op_url可直接跳转到帐号首页

GET /xhs/get_op_account_list

• 请求参数

无

• 响应格式

JSON 数组，每个元素包含：

{
  "op_account": "string",
  "op_url": "string",
  "op_desc": "string or null",
  "_field_comments": {
    "op_account": "帐号,出于习惯会带上@用于指名这是小红书帐号,如薯队长,习惯表示@薯队长",
    "op_url": "帐号首页URL,可以直接跳转",
    "op_desc": "帐号简介,来源为帐号首页的简介"
  }
}

• curl 示例

curl "https://qianhaistonepark.site/xhs/get_op_account_list"

---

3.获取热点话题

GET /xhs/get_hot_topic

• 请求参数

无

• 响应格式

JSON 数组，按热点指数降序排序,每个元素包含：

{
  "hot_title": "string",
  "hot_desc": "string",
  "hot_heat_index": "string",
  "hot_search_url": "string or null",
  "_field_comments": {
    "hot_title": "热点话题,需要解码",
    "hot_desc": "热点话题简介,需要解码",
    "hot_heat_index": "热度指数，数字加单位的方式,如200W,表示200万",
    "hot_search_url": "小红书话题搜索链接,需要解码"
  }
}

• curl 示例

# 获取平台热点话题
curl "https://qianhaistonepark.site/xhs/get_hot_topic"

---

4.小红书评分标准提示词接口

提示词:请根据如下接口返回的标准分别给用户的昵称,简介,和笔记的标题内容进行评分(10分满分),并按接口标准给出建议

GET /xhs/get_score_prompt

• 请求参数（全部可选）

参数	类型	默认值	说明
type	integer	1	1:返回用户昵称,简介的评分标准提示词,2:返回笔记标题评分标准提示词,3:返回笔记内容评分标准提示词

• 响应格式

JSON 数组，按热点指数降序排序,每个元素包含：

{
  "score_prompt": "string",
  "_field_comments": {
    "score_prompt":"需要解码,解码后的内容为Markdown格式"
  }
}

---

5.健康检查接口（可选）

• curl 示例

curl "https://qianhaistonepark.site/health"

• 返回示例：

{
  "status": "ok",
  "cached_notes": 240,
  "cached_accounts": 48
}

安全说明

为了保护数据源稳定性，防止接口被恶意爬虫滥用，部分返回字段采用了轻量级加密。 本 Skill 已内置 scripts/tool.py 解密模块，Agent 会自动解密并展示明文内容，用户无需手动操作。