小红书商业洞察与竞品分析助手

• Analyzed: Apr 17, 2026, 1:01 PM
• Findings: 0
• Version: 1.0.2
• Hash: 6ae68bf016d70d951d48bdd0b27a002ecb00a455a488bb88b096151ab9282fea
• Source: palm
• External report: View on VirusTotal

Overview

Type: OpenClaw Skill Name: xiaohongshu-tool Version: 1.0.2 The skill bundle is a legitimate data mining tool for Xiaohongshu (Red) analytics, acting as a wrapper for the Guaikei API. It implements robust input validation for keywords (src/validate/keyword.js) and URLs (src/validate/url.js) to prevent injection, uses standard Node.js HTTPS modules without external dependencies to minimize supply chain risks, and includes clear documentation for the OpenClaw agent. No evidence of data exfiltration, malicious execution, or prompt injection was found; the use of a hardcoded default API token (src/utils/key.js) is transparently handled as a fallback for trial purposes.