小红书搜索雷达

• Analyzed: May 16, 2026, 2:31 PM
• Findings: 1
• Version: 1.0.1
• Hash: 134ea2c323ddd71290ae898215833327450cb1aa68156194ae69a4c951c87c5b
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle is a legitimate CLI tool for searching and analyzing Xiaohongshu (Red) data via a third-party API (guaikei.com). The code uses standard Node.js built-in modules (https, fs) to interact with the API and save results to a local 'logs' directory. It includes proper input validation in 'src/validate/keyword.js' and 'src/validate/url.js', and handles the required 'GUAIKEI_API_TOKEN' environment variable as expected for its stated purpose. No evidence of data exfiltration, malicious execution, or prompt injection was found.