Security audit
Security checks for vulnerabilities and agentic risk
This skill is a disclosed Xiaohongshu drafting and publishing helper, with expected browser-account use and no evidence of hidden code execution, exfiltration, or destructive behavior.
Install only if you want an agent to help prepare and potentially publish Xiaohongshu posts from a browser session you control. Review each draft carefully, keep per-post approval explicit, and avoid configuring cron jobs to publish without a fresh approval step.
The description and title state the skill is for creating and publishing content to 小红书, and the instructions consistently require Chinese-formatted output for drafts and publication. There is no indication that the user can choose another language or opt into this locale constraint, which creates a language/locale policy concern.
The skill explicitly says to never auto-publish and to always wait for explicit user approval, but the cron section describes scheduled daily posting via isolated agent turns. In practice, that creates an approval-bypass path where autonomous execution could publish or prepare publishing actions without a fresh human confirmation, which is especially risky for actions taken in a logged-in browser session tied to a real social media account.
The guide instructs the agent to click the publish button and verify success, but it does not require an explicit final confirmation from the user immediately before submission. In a browser-automation publishing skill, this can cause unintended public posting of draft, incorrect, or sensitive content if earlier assumptions are wrong or the page state differs from expectations.
The document consistently prescribes Chinese-only content conventions, including Chinese title length, Chinese writing style, Chinese hashtags, and Xiaohongshu-specific Chinese post structure. This is a natural-language locale constraint presented as a requirement, but the file does not offer the user any language or locale choice or state that this limitation is optional.
The file directs the agent to notify the user with a fixed Chinese sentence, which imposes a specific language for user-facing communication. The document does not indicate that the skill is restricted to Chinese-speaking users or provide any opt-in or alternative language behavior.
No suspicious patterns detected.
