小红书评论分析

使用此技能分析小红书笔记评论区的情感倾向和用户态度。提供情感分类、正负面评论占比、情绪关键词提取和舆情洞察。当用户发送小红书笔记链接或 note ID 并要求分析评论区时使用。此技能不提供笔记内容下载或抓取。

Before installing or enabling this skill: (1) Understand that when you provide a Xiaohongshu note link the skill will send that link (and any parameters) to ai-skills.ai for analysis — verify you trust that third party and their privacy policy. (2) The skill requires an AISKILLS_API_KEY (revocable) even though registry metadata omitted it; only use a key you can revoke and monitor usage. (3) The provided one‑line script assumes curl, jq and a shell are available — confirm those tools are present or adapt the commands. (4) Avoid sending sensitive or private links as comments can contain PII; test first with non-sensitive data. (5) Prefer skills whose registry metadata accurately lists required env vars and binaries; consider asking the publisher to correct the manifest before use.

Type: OpenClaw Skill Name: xhs-sentiment-dashboard Version: 1.0.0 The skill contains a shell injection vulnerability in the 'One-click script' section of SKILL.md, where the user-provided $LINK variable is passed directly into a bash command without sanitization. It also requires the AISKILLS_API_KEY environment variable and sends user data (links and API keys) to a third-party domain (ai-skills.ai). While the behavior is aligned with the stated purpose of sentiment analysis, the insecure script construction and external data transmission pose a risk to the user's environment and data privacy.