Security audit
hongshu-note-parser
Security checks across malware telemetry and agentic risk
Overview
This skill coherently fetches a user-provided Xiaohongshu note, saves extracted content and images locally, and generates a local HTML analysis report.
Install if you are comfortable sending a Xiaohongshu note link through this tool and storing the downloaded note content and images under the output directory. Use analysis JSON produced by this workflow, because the report generator will embed image paths or image URLs listed in that file.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
65/65 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.