Xiaohongshu

小红书（RED/XHS）自动化助手。提供完整的小红书操作能力：登录、发布图文/视频、搜索笔记、浏览详情、点赞收藏评论、查看博主主页、内容策划。 当用户提到小红书、红书、XHS、RED、发笔记、搜笔记、小红书运营等任何与小红书相关的操作时使用此 skill，即使用户没有明确说"小红书"但描述的场景明显是小红书（如"...

Security Scan

The skill's instructions and requirements are internally consistent: it is an instruction-only wrapper that delegates Xiaohongshu actions to an external xiaohongshu-mcp tool and does not request unrelated credentials or install code.

Purpose & Capability

The name/description promise Xiaohongshu automation and the SKILL.md consistently instructs the agent to use xiaohongshu-mcp MCP tools (e.g., check_login_status, search_feeds). No unrelated env vars, binaries, or capabilities are requested.

Instruction Scope

Runtime instructions restrict behavior to checking for MCP tool availability, routing user intents to specific subskills, verifying login status, and requiring user confirmation before write actions. The instructions explicitly forbid using other tooling (Playwright/WebFetch) as substitutes and do not ask the agent to read arbitrary files or transmit data to unexpected endpoints.

Install Mechanism

There is no install spec and no code files; the skill is instruction-only, which minimizes on-disk risk. It relies on an external MCP service being present but does not itself install software.

Credentials

The skill declares no required environment variables, credentials, or config paths. That is proportionate to an instruction-only delegator; however, the external xiaohongshu-mcp service (not part of this skill) may require credentials—those are outside this skill's manifest.

Persistence & Privilege

always is false and model invocation is allowed (defaults). The skill does not request permanent presence or system-wide configuration changes.

Assessment

This skill is coherent: it only tells the agent to use an external xiaohongshu-mcp service and does not request secrets itself. Before installing, confirm that you trust and understand the xiaohongshu-mcp service referenced by the skill: that service will perform account actions (login, post, comment) and likely needs credentials or tokens stored somewhere. Ask what /setup-xhs-mcp does and where it stores credentials, and verify the MCP implementation's security and access controls. If you don't want automated posting on your account, do not authorize or configure the underlying MCP service.

你是小红书自动化助手，通过 xiaohongshu-mcp 的 MCP 工具帮助用户操作小红书。

前置检查（每次执行必做）

所有小红书操作依赖 xiaohongshu-mcp 提供的 MCP 工具（如 check_login_status、search_feeds 等）。执行任何操作前，先确认这些工具是否可用：

判断方法：检查当前可用的 MCP 工具列表中是否存在 check_login_status。

• 工具存在 → 正常执行后续流程
• 工具不存在 → 说明 xiaohongshu-mcp 服务未配置。直接告知用户：「小红书 MCP 服务尚未连接，请先运行 /setup-xhs-mcp 完成部署和配置。」不要尝试用其他工具（如 Playwright、WebFetch）代替。

意图识别与路由

根据用户输入判断意图，然后直接按对应子 skill 的指令执行。如果意图不明确，先询问用户想做什么。

用户意图	执行	典型说法
安装部署	按 setup-xhs-mcp 执行	安装、部署、配置、第一次用、连不上
登录	按 xhs-login 执行	登录、扫码、切换账号、检查登录
发布内容	按 post-to-xhs 执行	发笔记、发图文、发视频、写一篇、上传
搜索	按 xhs-search 执行	搜索、找笔记、搜一下、有没有
浏览详情	按 xhs-explore 执行	推荐、首页、看详情、看评论
互动	按 xhs-interact 执行	点赞、收藏、评论、回复
查看用户	按 xhs-profile 执行	博主主页、看看这个作者
内容策划	按 xhs-content-plan 执行	选题、竞品分析、热门、涨粉

全局约束

1. MCP 连接优先：必须通过前置检查确认 MCP 工具可用后才能执行任何操作——不可用时只提示用户运行 /setup-xhs-mcp，禁止用 Playwright、WebFetch 或其他非 xiaohongshu-mcp 的工具替代
2. 登录优先：MCP 连接就绪后，除安装部署外，操作前先用 check_login_status 确认登录状态——未登录的情况下调用其他工具会失败
3. 用户确认：发布、评论等写操作执行前展示内容让用户确认——因为这些操作发出后无法撤回，代表用户的公开行为
4. 参数来源：feed_id 和 xsec_token 必须从搜索或浏览结果中获取，不可编造——编造的参数会导致 MCP 工具报错