Xhs Autopilot

Red (Xiaohongshu) Full-Autonomous AI-Native Workflow Alchemy System. 30-min operation loop with self-improvement.

This skill is functionally coherent for automating Xiaohongshu activity, but it has several red flags: (1) the package does NOT include the scripts it tells the agent to run — ask the author or expect the agent to look elsewhere for code, which is risky; (2) it relies on connecting to your local Chrome CDP (localhost:9222) to inherit login state — that gives the agent the ability to act as you on Xiaohongshu; (3) it will read and write local memory directories and may publish automatically every 30 minutes. Before installing or enabling this skill: review and obtain the actual scripts the skill expects; run it only in an isolated environment or a dedicated browser profile with no sensitive accounts logged in; disable autonomous invocation if you want manual control; backup your workspace and avoid giving it access to your primary browser profile; and only proceed if you trust the skill's author/source and have inspected any referenced scripts. If you can't get the referenced scripts or provenance, treat the skill as high risk and avoid enabling autonomous execution.

Type: OpenClaw Skill Name: xhs-autopilot Version: 1.0.1 The skill implements an automated social media management system for Xiaohongshu (Red) that utilizes high-risk automation techniques. Specifically, it instructs the agent to connect to a running Chrome instance via the Chrome DevTools Protocol (CDP) on port 9222 to hijack existing login sessions and bypass anti-bot measures (detailed in DEVELOPER_BIBLE.md). Additionally, SKILL.md encourages 'self-evolution' by instructing the agent to autonomously create or modify scripts to solve operational bottlenecks, which introduces a significant risk of uncontrolled code execution. While these capabilities are aligned with the stated purpose of an 'AI-Native Autopilot,' the combination of browser session access and autonomous script modification is highly risky.