Security audit
Security checks for vulnerabilities and agentic risk
ClawScan rates this skill suspicious with medium confidence, mainly because it flags privacy and instruction-scope concerns while parts of the code were only partly inspected.
Consider the verdict suspicious before installing. Review whether you are comfortable sending keywords and links to the named third-party service, and avoid sharing request details that could contain sensitive terms or link tokens. The scan was partial: 29 of 42 components were fully inspected, so the remaining evidence is incomplete.
Referenced artifact was not completely inspected
- "帮我找最近一周小红书『露营装备』的高赞图文笔记 → node src/xiaohongshu/search-cli.js --keyword '露营装备' --type 2 --sort 2 --time 2 --limit 20"
Referenced artifact was not completely inspected
- "监控『多巴胺穿搭』最新动态 → node src/xiaohongshu/search-cli.js --keyword '多巴胺穿搭' --sort 1 --time 1 --limit 40"
Referenced artifact was not completely inspected
| 搜笔记、爆款、选题 | `node src/xiaohongshu/search-cli.js` | `--keyword` |
Referenced artifact was not completely inspected
node src/xiaohongshu/search-cli.js --keyword "露营装备" --type 2 --sort 2 --time 2 --limit 20
Referenced artifact was not completely inspected
node src/xiaohongshu/search-cli.js --keyword "多巴胺穿搭" --sort 1 --time 1 --limit 40
Referenced artifact was not completely inspected
- "这条小红书笔记评论区在吐槽什么 → node src/xiaohongshu/comment-cli.js --url 'https://www.xiaohongshu.com/explore/xxx?xsec_token=%2A%2A%2A' --limit 20"
Referenced artifact was not completely inspected
- "只要这篇笔记近 30 天的评论 → node src/xiaohongshu/comment-cli.js --url 'https://www.xiaohongshu.com/explore/xxx' --expired_at 30 --limit 20"
Referenced artifact was not completely inspected
| 舆情 / 客服 | 评论区在吐槽还是在夸 | `comment-cli.js` |
Referenced artifact was not completely inspected
| 一篇笔记的评论 / 舆情 | `node src/xiaohongshu/comment-cli.js` | 笔记链接或 24 位笔记 id |
Referenced artifact was not completely inspected
node src/xiaohongshu/comment-cli.js --url "https://www.xiaohongshu.com/explore/xxx" --limit 20
Referenced artifact was not completely inspected
node src/xiaohongshu/comment-cli.js --url "https://www.xiaohongshu.com/explore/xxx" --expired_at 30 --limit 20
Referenced artifact was not completely inspected
- "看这个小红书博主最近 30 条作品发什么 → node src/xiaohongshu/post-cli.js --url 'https://www.xiaohongshu.com/user/profile/xxx?xsec_token=%2A%2A%2A' --limit 30"
Referenced artifact was not completely inspected
- "这个小红书博主多少粉丝 → node src/xiaohongshu/post-cli.js --url 'https://www.xiaohongshu.com/user/profile/xxx' --limit 0"
Referenced artifact was not completely inspected
| 品牌 / 投放 | 监控已知博主发文与互动 | `post-cli.js`（要作品须显式 `--limit`） |
Referenced artifact was not completely inspected
| 博主作品、粉丝、获赞 | `node src/xiaohongshu/post-cli.js` | 主页链接或 24/29 位 `user_id` |
Referenced artifact was not completely inspected
node src/xiaohongshu/post-cli.js --url "https://www.xiaohongshu.com/user/profile/xxx" --limit 30
Referenced artifact was not completely inspected
node src/xiaohongshu/post-cli.js --url "https://www.xiaohongshu.com/user/profile/xxx" --limit 0
Referenced artifact was not completely inspected
- "分析这篇小红书爆款笔记为什么火 → node src/xiaohongshu/detail-cli.js --url 'https://www.xiaohongshu.com/explore/xxx?xsec_token=%2A%2A%2A'"
Referenced artifact was not completely inspected
| 内容分析 | 看一篇笔记正文、图片、互动 | `detail-cli.js` |
Referenced artifact was not completely inspected
| 一篇笔记的正文 / 为什么火 | `node src/xiaohongshu/detail-cli.js` | 笔记链接或 24 位笔记 id |
Referenced artifact was not completely inspected
node src/xiaohongshu/detail-cli.js --url "https://www.xiaohongshu.com/explore/xxx?xsec_token=%2A%2A%2A"
Without declared permissions the skill's intent is opaque and cannot be validated.
L129–L133 instruct the agent to execute searches and retrieve details, comments, and creator data; these are workflow instructions rather than a tool catalog. This source does not warn that the supplied keywords and links are transmitted to guaikei.com, leaving the privacy implications undisclosed.
The troubleshooting guidance recommends sending the request object to support without redaction or a user-review step. Requests can contain sensitive research keywords and complete supplied links, potentially including query tokens, so escalation can unnecessarily disclose user information even though the retrieved platform content is public.
The comment explicitly requires Beijing time and a fixed date format. It does not describe a user-selectable timezone or explain why this locale constraint is necessary.