Security audit
Security checks for vulnerabilities and agentic risk
This skill is a disclosed XiaoHongShu public-data search tool that sends user queries or links to the guaikei.com API with a configured token and saves returned results locally.
Install only if you are comfortable sending XiaoHongShu keywords or links plus your GUAIKEI_API_TOKEN to guaikei.com. Keep the token private, avoid running large pulls on shared machines unless local temp logs are acceptable, and use the tool only for public content analysis as documented.
代码片段仅包含 src/utils/args.js，一个通用 CLI 参数解析器。它负责读取命令行参数、校验参数类型、处理布尔/默认值/位置参数、生成帮助文本，并在参数错误时抛出异常。这属于底层辅助工具，不涉及网络请求、网页抓取、API 调用、数据解析，也没有任何指向小红书公开内容检索或分析的实现。根据评估标准，这不是“支持实现细节恰好被单独展示”的轻微偏差，而是当前提供的代码块与声明的核心能力在功能层面完全不一致，因此应判定为描述与行为不匹配。
声明描述的是一个面向小红书公开内容检索与分析的完整数据技能，但提供的代码片段仅实现了读取本地 package.json 文件中的 name 字段并做缓存。这既没有体现声明中的核心能力，也没有显示任何网络请求、页面抓取、API 调用、数据处理或社媒分析逻辑。虽然这可能是某个辅助工具文件，但就该代码片段本身而言，其实际行为与声明用途明显不一致，应判定为描述与行为不匹配。
Referenced artifact was not completely inspected
- "这条小红书笔记评论区在吐槽什么 → node src/xiaohongshu/comment-cli.js --url 'https://www.xiaohongshu.com/explore/xxx?xsec_token=yyy' --limit 200"
Referenced artifact was not completely inspected
- "这条小红书笔记评论区在吐槽什么 → node src/xiaohongshu/comment-cli.js --url 'https://www.xiaohongshu.com/explore/xxx?xsec_token=yyy' --limit 200"
Referenced artifact was not completely inspected
- "这条小红书笔记评论区在吐槽什么 → node src/xiaohongshu/comment-cli.js --url 'https://www.xiaohongshu.com/explore/xxx?xsec_token=yyy' --limit 200"
Referenced artifact was not completely inspected
- "这条小红书笔记评论区在吐槽什么 → node src/xiaohongshu/comment-cli.js --url 'https://www.xiaohongshu.com/explore/xxx?xsec_token=yyy' --limit 200"
Referenced artifact was not completely inspected
- "这条小红书笔记评论区在吐槽什么 → node src/xiaohongshu/comment-cli.js --url 'https://www.xiaohongshu.com/explore/xxx?xsec_token=yyy' --limit 200"
Referenced artifact was not completely inspected
- "看这个小红书博主最近 30 条作品发什么 → node src/xiaohongshu/post-cli.js --url 'https://www.xiaohongshu.com/user/profile/xxx?xsec_token=yyy' --limit 30"
Referenced artifact was not completely inspected
- "看这个小红书博主最近 30 条作品发什么 → node src/xiaohongshu/post-cli.js --url 'https://www.xiaohongshu.com/user/profile/xxx?xsec_token=yyy' --limit 30"
Referenced artifact was not completely inspected
- "看这个小红书博主最近 30 条作品发什么 → node src/xiaohongshu/post-cli.js --url 'https://www.xiaohongshu.com/user/profile/xxx?xsec_token=yyy' --limit 30"
Referenced artifact was not completely inspected
- "看这个小红书博主最近 30 条作品发什么 → node src/xiaohongshu/post-cli.js --url 'https://www.xiaohongshu.com/user/profile/xxx?xsec_token=yyy' --limit 30"
Referenced artifact was not completely inspected
- "分析这篇小红书爆款笔记为什么火 → node src/xiaohongshu/detail-cli.js --url 'https://www.xiaohongshu.com/explore/xxx?xsec_token=yyy'"
Referenced artifact was not completely inspected
- "分析这篇小红书爆款笔记为什么火 → node src/xiaohongshu/detail-cli.js --url 'https://www.xiaohongshu.com/explore/xxx?xsec_token=yyy'"
Referenced artifact was not completely inspected
- "分析这篇小红书爆款笔记为什么火 → node src/xiaohongshu/detail-cli.js --url 'https://www.xiaohongshu.com/explore/xxx?xsec_token=yyy'"
Referenced artifact was not completely inspected
- "分析这篇小红书爆款笔记为什么火 → node src/xiaohongshu/detail-cli.js --url 'https://www.xiaohongshu.com/explore/xxx?xsec_token=yyy'"
Referenced artifact was not completely inspected
- "分析这篇小红书爆款笔记为什么火 → node src/xiaohongshu/detail-cli.js --url 'https://www.xiaohongshu.com/explore/xxx?xsec_token=yyy'"
Without declared permissions the skill's intent is opaque and cannot be validated.
The instruction tells users to 'directly say it in plain language' and gives only a Chinese example phrase, while the document consistently frames usage in Chinese without any opt-in or alternative language support. Under the policy, forcing a specific language without user choice is a natural-language policy concern unless the locale constraint is explicitly justified.
Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.
| --------------- | ------------------------ | --------------------------------------------------------------------------------- |
| `--url`, `-u` | 小红书博主主页链接，必填 | 建议使用主页链接或可解析的短链 |
| `--limit`, `-l` | 返回作品数量上限 | 建议显式传入 `0-10000`；若为0，则获取该博主的互动数据（粉丝量、点赞量、收藏量等） |
| `--help`, `-h` | 显示帮助信息 | 无 |
### 4.4 链接建议
This JavaScript file contains natural-language comments, help text, and thrown error messages entirely in Chinese, including the CLI usage/help output and runtime validation errors. Under the policy, forcing a specific language without user opt-in or clear locale justification is a natural-language policy violation.
This code performs outbound HTTPS GET/POST requests and includes a TOKEN header plus request parameters/body, which may transmit user or system data to a remote service. Within this file there is no confirmation prompt, user-facing log/print, or explanatory comment/docstring disclosing that network transmission and token-based authentication occur.
The code requires a token, references the GUAIKEI_API_TOKEN environment variable in an error message, and transmits the token in the TOKEN request header. There is no visible warning or explanatory comment in this file informing users that a credential is expected and will be sent to an external endpoint.
This JavaScript file contains user-facing validation errors and comments in Chinese, including printed error messages such as at L08, L13, L17, L21, L25-L27, L59, L64, L69, and L73. Because the skill appears to force a specific language for interaction without offering user choice or documenting a justified locale restriction, it violates the language/locale policy criteria.
The help text explicitly requires the GUAIKEI_API_TOKEN environment variable, and the code enforces it through key.skillKey(process.env.GUAIKEI_API_TOKEN). For a skill presented as usable without account login, introducing a required secret/token is an additional capability/dependency not justified by the stated user-facing purpose.
The CLI sends the provided note URL and an API token to remote detail-task endpoints via createDetailTask and getDetailTask. While the help text mentions that GUAIKEI_API_TOKEN must be configured, it does not clearly disclose that the command will transmit the URL and authenticated request data to an external service.
Detected: suspicious.exposed_secret_literal