小红书商业洞察与竞品分析助手

• Verdict: Pass
• Confidence: Medium
• Analyzed: Apr 17, 2026, 12:53 PM
• Findings: 0
• Version: 1.0.2

Overview

Code and runtime instructions match the described Xiaohongshu data‑analysis purpose, but the skill sends queries and note URLs to a third‑party API (www.guaikei.com), uses an embedded default demo token if you don't set GUAIKEI_API_TOKEN, and writes logs locally — review the external service before use.

This skill appears to do what it says: it runs Node CLI scripts that call a third‑party API to fetch Xiaohongshu public data. Before installing/running: 1) Verify you trust the external API provider (www.guaikei.com) because the tool will send queries and note URLs to that host. 2) Provide your own GUAIKEI_API_TOKEN instead of relying on the embedded default demo token; check the provider's terms and rate limits. 3) Be aware the tool writes results to a local logs/ directory — do not run it on systems containing sensitive data you don't want logged. 4) Review the upstream GitHub repository (package.json points to github.com/um-why/xiaohongshu-openclaw-skill) and the provider's privacy/usage policies if you need higher assurance. If you need me to, I can summarize the exact network calls the skill makes or help verify the external domain's reputation.