Security audit
Security checks for vulnerabilities and agentic risk
The skill retrieves public Xiaohongshu data through a disclosed third-party service and saves results locally unless logging is disabled.
Queries and full supplied links go to guaikei.com using your service token and may incur charges. Check the provider's pricing and data practices. Set XHS_GUAIKEI_DISABLE_LOG=1 if you do not want query and result files retained locally. Manual source review addressed the scanner's material coverage gaps; the remote service itself was not verified.
Referenced artifact was not completely inspected
- "帮我找最近一周小红书『露营装备』的高赞图文笔记 → node src/xiaohongshu/search-cli.js --keyword '露营装备' --type 2 --sort 2 --time 2 --limit 20"
Referenced artifact was not completely inspected
- "监控『多巴胺穿搭』最新动态 → node src/xiaohongshu/search-cli.js --keyword '多巴胺穿搭' --sort 1 --time 1 --limit 40"
Referenced artifact was not completely inspected
| 🔍 找选题、看高赞 | `search-cli.js` | 笔记数组。点赞、收藏、评论、分享都是字符串 |
Referenced artifact was not completely inspected
| 🔍 关键词，没有链接 | `node src/xiaohongshu/search-cli.js` | `--keyword` |
Referenced artifact was not completely inspected
4. 🔍 有关键词，且没有上面三类信号 → `search-cli.js`
Referenced artifact was not completely inspected
r，退出码 0，stdout 为空。`-t` 是内容类型，`-i` 才是发布时间。关键词以 `-` 开头时写成 `--keyword=-AI`，或 `node src/xiaohongshu/search-cli.js -- -AI`。完整字段见 `assets/*_cli_req.schema.json` 与 [re
Referenced artifact was not completely inspected
node src/xiaohongshu/search-cli.js --keyword "露营装备" --type 2 --sort 2 --time 2 --limit 20
Referenced artifact was not completely inspected
node src/xiaohongshu/search-cli.js --keyword "多巴胺穿搭" --sort 1 --time 1 --limit 40
Referenced artifact was not completely inspected
- "这条小红书笔记评论区在吐槽什么 → node src/xiaohongshu/comment-cli.js --url 'https://www.xiaohongshu.com/explore/xxx?xsec_token=%2A%2A%2A' --limit 20"
Referenced artifact was not completely inspected
- "只要这篇笔记近 30 天的评论 → node src/xiaohongshu/comment-cli.js --url 'https://www.xiaohongshu.com/explore/xxx' --expired_at 30 --limit 20"
Referenced artifact was not completely inspected
| 💬 看评论区 | `comment-cli.js` | 评论数组 |
Referenced artifact was not completely inspected
| 💬 笔记链接或笔记 id，只要评论 | `node src/xiaohongshu/comment-cli.js` | `--url` |
Referenced artifact was not completely inspected
1. 💬 要评论、留言、舆情，且对象是一篇笔记 → `comment-cli.js`
Referenced artifact was not completely inspected
| 评论区、舆情 | `comment-cli.js`。没说条数用默认 10；要归纳观点再加大 `--limit`（包月勿超 20） |
Referenced artifact was not completely inspected
- `xiaohongshu.com/explore/{id}` 只能给 `detail-cli.js` 或 `comment-cli.js`
Referenced artifact was not completely inspected
- `xiaohongshu.com/discovery/item/{id}` 给 `detail-cli.js` 或 `comment-cli.js`
Referenced artifact was not completely inspected
`detail-cli.js` 不返回评论。正文和评论都要时，先详情，再 `comment-cli.js`。
Referenced artifact was not completely inspected
node src/xiaohongshu/comment-cli.js --url "https://www.xiaohongshu.com/explore/xxx?xsec_token=%2A%2A%2A" --limit 20
Referenced artifact was not completely inspected
node src/xiaohongshu/comment-cli.js --url "https://www.xiaohongshu.com/explore/xxx" --expired_at 365 --limit 20
Referenced artifact was not completely inspected
node src/xiaohongshu/comment-cli.js --url "https://www.xiaohongshu.com/explore/xxx" --expired_at "2026-10-01 12:00:00" --limit 20
Referenced artifact was not completely inspected
- "看这个小红书博主最近 30 条作品发什么 → node src/xiaohongshu/post-cli.js --url 'https://www.xiaohongshu.com/user/profile/xxx?xsec_token=%2A%2A%2A' --limit 30"
Referenced artifact was not completely inspected
- "这个小红书博主多少粉丝 → node src/xiaohongshu/post-cli.js --url 'https://www.xiaohongshu.com/user/profile/xxx' --limit 0"
Referenced artifact was not completely inspected
| 👥 看粉丝、获赞、收藏 | `post-cli.js`，不传 `--limit` 或 `--limit 0` | `results.user`。`fans` 粉丝，`liked` 获赞，`collected` 收藏，`interaction` 获赞与收藏 |
Referenced artifact was not completely inspected
| 👥 博主主页或 user_id | `node src/xiaohongshu/post-cli.js` | `--url` |
Referenced artifact was not completely inspected
2. 👥 要作品、主页、账号、博主、粉丝、获赞 → `post-cli.js`