小红书数据洞察大师 - 爆款挖掘与竞品分析专家

• Analyzed: May 16, 2026, 9:41 AM
• Findings: 1
• Version: 1.0.0
• Hash: b3b2b4908faacee16b356fc232445ddf88a43931bea8f4ebdfa4111ec0fccdca
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle is a legitimate API wrapper for the 'guaikei.com' service, providing Xiaohongshu (XHS) data retrieval capabilities. The code is well-structured, uses standard Node.js libraries (https, fs), and contains no external dependencies, which minimizes supply chain risks. While the tool transmits the API token via query parameters (a minor security vulnerability) and directs users to a private WeChat ID for token acquisition, these behaviors are consistent with the stated purpose of the tool and do not show evidence of malicious intent, data exfiltration, or unauthorized system access.