Security audit
Security checks for vulnerabilities and agentic risk
This skill is a disclosed Xiaohongshu research tool that queries a third-party API for public content and saves local result logs, with no evidence of hidden execution, account takeover, or destructive behavior.
Install only if you are comfortable using guaikei.com as the data provider. The skill does not require your Xiaohongshu login, but it does require a GUAIKEI_API_TOKEN and sends your query keywords or Xiaohongshu links to that API. Returned public-data results are also saved locally in temp logs, so avoid running it on queries or outputs you would not want retained on the machine.
The skill prominently claims '无需登录账号' while requiring an API token (GUAIKEI_API_TOKEN) from a third-party service, which can mislead users about the trust boundary and data-sharing model. In a security-sensitive agent ecosystem, inaccurate claims about authentication and external dependency usage can cause users to disclose data or authorize actions under false assumptions.
The skill prominently claims '无需登录账号' while requiring an API token (GUAIKEI_API_TOKEN) from a third-party service, which can mislead users about the trust boundary and data-sharing model. In a security-sensitive agent ecosystem, inaccurate claims about authentication and external dependency usage can cause users to disclose data or authorize actions under false assumptions.
The skill prominently claims '无需登录账号' while requiring an API token (GUAIKEI_API_TOKEN) from a third-party service, which can mislead users about the trust boundary and data-sharing model. In a security-sensitive agent ecosystem, inaccurate claims about authentication and external dependency usage can cause users to disclose data or authorize actions under false assumptions.
The skill prominently claims '无需登录账号' while requiring an API token (GUAIKEI_API_TOKEN) from a third-party service, which can mislead users about the trust boundary and data-sharing model. In a security-sensitive agent ecosystem, inaccurate claims about authentication and external dependency usage can cause users to disclose data or authorize actions under false assumptions.
Referenced artifact was not completely inspected
- "这条小红书笔记评论区在吐槽什么 → node src/xiaohongshu/comment-cli.js --url 'https://www.xiaohongshu.com/explore/xxx?xsec_token=yyy' --limit 200"
Referenced artifact was not completely inspected
- "这条小红书笔记评论区在吐槽什么 → node src/xiaohongshu/comment-cli.js --url 'https://www.xiaohongshu.com/explore/xxx?xsec_token=yyy' --limit 200"
Referenced artifact was not completely inspected
- "这条小红书笔记评论区在吐槽什么 → node src/xiaohongshu/comment-cli.js --url 'https://www.xiaohongshu.com/explore/xxx?xsec_token=yyy' --limit 200"
Referenced artifact was not completely inspected
- "这条小红书笔记评论区在吐槽什么 → node src/xiaohongshu/comment-cli.js --url 'https://www.xiaohongshu.com/explore/xxx?xsec_token=yyy' --limit 200"
Referenced artifact was not completely inspected
- "这条小红书笔记评论区在吐槽什么 → node src/xiaohongshu/comment-cli.js --url 'https://www.xiaohongshu.com/explore/xxx?xsec_token=yyy' --limit 200"
Referenced artifact was not completely inspected
- "看这个小红书博主最近 30 条作品发什么 → node src/xiaohongshu/post-cli.js --url 'https://www.xiaohongshu.com/user/profile/xxx?xsec_token=yyy' --limit 30"
Referenced artifact was not completely inspected
- "看这个小红书博主最近 30 条作品发什么 → node src/xiaohongshu/post-cli.js --url 'https://www.xiaohongshu.com/user/profile/xxx?xsec_token=yyy' --limit 30"
Referenced artifact was not completely inspected
- "看这个小红书博主最近 30 条作品发什么 → node src/xiaohongshu/post-cli.js --url 'https://www.xiaohongshu.com/user/profile/xxx?xsec_token=yyy' --limit 30"
Referenced artifact was not completely inspected
- "看这个小红书博主最近 30 条作品发什么 → node src/xiaohongshu/post-cli.js --url 'https://www.xiaohongshu.com/user/profile/xxx?xsec_token=yyy' --limit 30"
Referenced artifact was not completely inspected
- "分析这篇小红书爆款笔记为什么火 → node src/xiaohongshu/detail-cli.js --url 'https://www.xiaohongshu.com/explore/xxx?xsec_token=yyy'"
Referenced artifact was not completely inspected
- "分析这篇小红书爆款笔记为什么火 → node src/xiaohongshu/detail-cli.js --url 'https://www.xiaohongshu.com/explore/xxx?xsec_token=yyy'"
Referenced artifact was not completely inspected
- "分析这篇小红书爆款笔记为什么火 → node src/xiaohongshu/detail-cli.js --url 'https://www.xiaohongshu.com/explore/xxx?xsec_token=yyy'"
Referenced artifact was not completely inspected
- "分析这篇小红书爆款笔记为什么火 → node src/xiaohongshu/detail-cli.js --url 'https://www.xiaohongshu.com/explore/xxx?xsec_token=yyy'"
Referenced artifact was not completely inspected
- "分析这篇小红书爆款笔记为什么火 → node src/xiaohongshu/detail-cli.js --url 'https://www.xiaohongshu.com/explore/xxx?xsec_token=yyy'"
Without declared permissions the skill's intent is opaque and cannot be validated.
The manifest description is entirely in Chinese and defines when the skill should be invoked based on Chinese-language intents, without offering any language or locale choice. This can violate language/locale policy because the skill is effectively constrained to a specific language by default rather than documenting an optional or justified region-specific limitation.
The package description limits the skill to deriving user issues, concerns, feedback, demand terms, and sentiment evidence from Xiaohongshu comments and related content. However, the declared CLI commands and main entry point include search, detail, post, and comment operations, which align with broader note/video search and content-detail retrieval rather than only comment insight summarization.
Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.
| --------------- | ------------------------ | --------------------------------------------------------------------------------- |
| `--url`, `-u` | 小红书博主主页链接，必填 | 建议使用主页链接或可解析的短链 |
| `--limit`, `-l` | 返回作品数量上限 | 建议显式传入 `0-10000`；若为0，则获取该博主的互动数据（粉丝量、点赞量、收藏量等） |
| `--help`, `-h` | 显示帮助信息 | 无 |
### 4.4 链接建议
This markdown file presents all troubleshooting guidance exclusively in Chinese, and does not indicate that users may choose another language or that the Chinese-only constraint is intentional and justified. Under the policy, forcing a specific language without user opt-in is a natural-language policy concern.
This file contains natural-language strings such as comments and runtime error/log messages only in Chinese, with no indication that the skill is China-specific or that users can opt into this locale. Per the policy, forcing a specific language without user choice is a natural-language policy violation.
This JavaScript file contains natural-language documentation and runtime messages exclusively in Chinese, including the module description, parameter docs, and error/retry messages. Under the policy, forcing a specific language without user opt-in or a documented justification is a locale-policy violation.
Detected: suspicious.exposed_secret_literal