Security audit
Security checks for vulnerabilities and agentic risk
This is a coherent Xiaohongshu public-data lookup skill, with the main caveat that searches and links are sent to guaikei.com and results are saved locally.
Install only if you are comfortable using the guaikei.com API with an environment token and sending your Xiaohongshu keywords or URLs to that service. Treat the local temp JSON logs as potentially sensitive if your research targets or returned public comments are confidential to your team.
声明描述的是一个面向小红书数据检索与分析的业务工具，但给出的代码片段仅是 src/utils/args.js，一个通用 CLI 参数解析器。它只处理命令行参数读取、类型校验、重复参数检查、位置参数冲突告警以及帮助文本生成。代码中没有任何与小红书/xhs/rednote 相关的 API 调用、网页抓取、数据解析、评论分析、博主信息获取或笔记详情获取逻辑。因此，该代码片段的实际行为与声明用途存在明显不符，属于实质性 mismatch。
The declared description describes a full-featured Xiaohongshu data collection and analysis tool. However, the supplied code chunk does not implement any of those capabilities. It merely reads package.json from the local filesystem and returns the package name. This is not a supporting implementation detail clearly tied to the described functionality; it is a generic utility unrelated to the claimed search, scraping, analytics, or comment-inspection behavior. Therefore, the description does not accurately represent what this code chunk actually does.
Referenced artifact was not completely inspected
- "这条小红书笔记评论区在吐槽什么 → node src/xiaohongshu/comment-cli.js --url 'https://www.xiaohongshu.com/explore/xxx?xsec_token=yyy' --limit 200"
Referenced artifact was not completely inspected
- "这条小红书笔记评论区在吐槽什么 → node src/xiaohongshu/comment-cli.js --url 'https://www.xiaohongshu.com/explore/xxx?xsec_token=yyy' --limit 200"
Referenced artifact was not completely inspected
- "这条小红书笔记评论区在吐槽什么 → node src/xiaohongshu/comment-cli.js --url 'https://www.xiaohongshu.com/explore/xxx?xsec_token=yyy' --limit 200"
Referenced artifact was not completely inspected
- "这条小红书笔记评论区在吐槽什么 → node src/xiaohongshu/comment-cli.js --url 'https://www.xiaohongshu.com/explore/xxx?xsec_token=yyy' --limit 200"
Referenced artifact was not completely inspected
- "这条小红书笔记评论区在吐槽什么 → node src/xiaohongshu/comment-cli.js --url 'https://www.xiaohongshu.com/explore/xxx?xsec_token=yyy' --limit 200"
Referenced artifact was not completely inspected
- "看这个小红书博主最近 30 条作品发什么 → node src/xiaohongshu/post-cli.js --url 'https://www.xiaohongshu.com/user/profile/xxx?xsec_token=yyy' --limit 30"
Referenced artifact was not completely inspected
- "看这个小红书博主最近 30 条作品发什么 → node src/xiaohongshu/post-cli.js --url 'https://www.xiaohongshu.com/user/profile/xxx?xsec_token=yyy' --limit 30"
Referenced artifact was not completely inspected
- "看这个小红书博主最近 30 条作品发什么 → node src/xiaohongshu/post-cli.js --url 'https://www.xiaohongshu.com/user/profile/xxx?xsec_token=yyy' --limit 30"
Referenced artifact was not completely inspected
- "看这个小红书博主最近 30 条作品发什么 → node src/xiaohongshu/post-cli.js --url 'https://www.xiaohongshu.com/user/profile/xxx?xsec_token=yyy' --limit 30"
Referenced artifact was not completely inspected
- "分析这篇小红书爆款笔记为什么火 → node src/xiaohongshu/detail-cli.js --url 'https://www.xiaohongshu.com/explore/xxx?xsec_token=yyy'"
Referenced artifact was not completely inspected
- "分析这篇小红书爆款笔记为什么火 → node src/xiaohongshu/detail-cli.js --url 'https://www.xiaohongshu.com/explore/xxx?xsec_token=yyy'"
Referenced artifact was not completely inspected
- "分析这篇小红书爆款笔记为什么火 → node src/xiaohongshu/detail-cli.js --url 'https://www.xiaohongshu.com/explore/xxx?xsec_token=yyy'"
Referenced artifact was not completely inspected
- "分析这篇小红书爆款笔记为什么火 → node src/xiaohongshu/detail-cli.js --url 'https://www.xiaohongshu.com/explore/xxx?xsec_token=yyy'"
Referenced artifact was not completely inspected
- "分析这篇小红书爆款笔记为什么火 → node src/xiaohongshu/detail-cli.js --url 'https://www.xiaohongshu.com/explore/xxx?xsec_token=yyy'"
Without declared permissions the skill's intent is opaque and cannot be validated.
The README states that execution results are automatically archived to local logs, but the finding indicates this behavior is not clearly surfaced as a user warning. Because the tool processes potentially sensitive research targets, URLs, keywords, and returned content, silent local retention can expose private business intelligence, monitoring targets, or user activity to other local users, backups, or endpoint collection tools.
Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.
| --------------- | ------------------------ | --------------------------------------------------------------------------------- |
| `--url`, `-u` | 小红书博主主页链接，必填 | 建议使用主页链接或可解析的短链 |
| `--limit`, `-l` | 返回作品数量上限 | 建议显式传入 `0-10000`；若为0，则获取该博主的互动数据（粉丝量、点赞量、收藏量等） |
| `--help`, `-h` | 显示帮助信息 | 无 |
### 4.4 链接建议
This file contains user-facing operational guidance exclusively in Chinese, including headings, instructions, and support information. Under the policy, forcing a specific language without user opt-in is a natural-language policy violation unless the locale restriction is explicitly justified.
Multiple error messages are hard-coded in Chinese, such as '请求失败', '响应解析失败', and 'path 必须是非空字符串'. This imposes a specific language on users without any visible opt-in, fallback, or documented region-specific constraint, which is a natural-language locale policy concern.
The manifest explicitly says '无需登录账号', suggesting use should not depend on user-provided authentication or secret setup. This CLI requires the GUAIKEI_API_TOKEN environment variable and exits if it is absent, which introduces a credential dependency not justified by the user-facing purpose as described.
The CLI persists fetched comment results to a local JSON file automatically, with no explicit notice or opt-in. Comment data may contain personal information, identifiers, or sensitive content, and silent persistence increases the chance of unintended retention, local disclosure, or later reuse outside the user's expectations.
The script reads a sensitive credential from GUAIKEI_API_TOKEN and then uses it to create and fetch a remote detail task for the user-supplied URL. Although the CLI help mentions that the token must be configured, it does not clearly warn that running the command will transmit the note URL and token-authenticated request data to an external service.
After printing the results, the script saves the full output to a timestamped JSON file via log.taskWrite. There is no visible warning in this file's help text or runtime messaging that command output will be persisted to disk, which may surprise users if the results contain sensitive content.
Detected: suspicious.exposed_secret_literal