XHS Parser（小红书链接解析）

小红书（XHS/RedNote）链接解析工具。解析小红书短链接或作品链接，获取作品信息（标题、作者、正文、标签、下载地址）。当用户发送小红书链接（xhslink.com 或 xiaohongshu.com）并要求解析、下载、分析内容时触发。

Security Scan

The skill's instructions match its stated purpose (parsing/downloading XHS links) but it depends on an external project ('XHS-Downloader') with no source or homepage — requiring you to obtain and run unknown code locally, which is a notable risk.

Purpose & Capability

The SKILL.md describes exactly the claimed purpose (parsing/downloading Xiaohongshu links) and shows how to run a local API or CLI in ~/projects/xhs-downloader. That dependency is coherent with the purpose, but the skill provides no origin (repo URL or homepage) for XHS-Downloader, which is unexpected for a dependency the skill relies on.

Instruction Scope

Runtime instructions are limited to running a local Python program (main.py) inside a virtualenv at a specific path and calling a localhost HTTP endpoint or running a CLI. The instructions do not ask the agent to read unrelated files or environment variables. However, they implicitly require running arbitrary Python code (XHS-Downloader) on the user's machine — the skill gives no guidance where that code should be obtained or how to verify it.

Install Mechanism

There is no install spec and no code included. The skill expects you to have installed an external project at ~/projects/xhs-downloader. Because the project source is unspecified, installing and running it could involve downloading and executing untrusted code — a high-risk action that the SKILL.md does not help mitigate (no repo link, no hashes, no vendor).

Credentials

The skill declares no required env vars or credentials, which is proportionate. The README mentions cookies for higher-resolution downloads, but does not instruct how to provide them or whether they are needed; this could lead users to paste session cookies or credentials into the downloader tool without guidance, a potential privacy/credential risk.

Persistence & Privilege

The skill is instruction-only, has no install behavior, and does not request always:true or other elevated persistent privileges. It does not attempt to change other skill configs or system-wide settings.

What to consider before installing

This skill appears to do what it says, but it depends on an external project (XHS-Downloader) whose source is not provided. Before installing or running anything: (1) ask the publisher for the repository URL or official homepage; (2) only download XHS-Downloader from a trusted source (official repo or release), verify checksums/signatures if available; (3) inspect the code (or have someone you trust review it) before running; (4) run it inside an isolated environment (container or VM) and a dedicated Python virtualenv; (5) avoid pasting session cookies or credentials unless you trust the tool and understand the privacy implications. If the publisher cannot provide a reputable source for XHS-Downloader, treat this skill as risky.

基于 XHS-Downloader 实现小红书链接解析和下载。

环境要求

• Python 3.12+
• XHS-Downloader 安装在 ~/projects/xhs-downloader

安装依赖

# 如果还没有 Python 3.12
brew install python@3.12

# 创建虚拟环境并安装依赖
cd ~/projects/xhs-downloader
/opt/homebrew/bin/python3.12 -m venv venv
source venv/bin/activate
pip install -r requirements.txt

使用方式

方式1：API 模式（推荐）

cd ~/projects/xhs-downloader
source venv/bin/activate
python main.py api --port 5556

然后调用：

curl -X POST "http://127.0.0.1:5556/xhs/detail" \
  -H "Content-Type: application/json" \
  -d '{"url": "xhslink链接", "download": false}'

方式2：命令行直接下载

cd ~/projects/xhs-downloader
source venv/bin/activate
python main.py -u "小红书链接" \
  --work_path ~/Desktop/ \
  --folder_name "下载文件夹名"

支持的链接格式

• http://xhslink.com/o/xxx （短链接）
• https://www.xiaohongshu.com/explore/作品ID
• https://www.xiaohongshu.com/discovery/item/作品ID

返回字段说明

字段	含义
作品标题	笔记标题
作品描述	笔记正文内容
作者昵称	发布者名字
点赞数量	点赞数
收藏数量	收藏数
评论数量	评论数
作品类型	图文/视频
下载地址	媒体文件直链

注意事项

• 不设置 Cookie 时视频只能下载低分辨率
• 链接有日期限制，建议使用最新获取的链接