redbook

Search, read, analyze, and automate Xiaohongshu (小红书) content via CLI

What to consider before installing/running this skill: - This package authenticates by reading your browser cookies (Chrome). That requires access to Chrome profile files and on macOS may trigger Keychain prompts; if you are logged into a Xiaohongshu account you supply those session credentials to the tool. Only install this if you trust the source and understand cookie-based auth risks. - The npm postinstall script will: (a) create a symlink at ~/.claude/skills/redbook so Claude Code gains an automatic /redbook command, and (b) patch files inside node_modules/@steipete/sweet-cookie to change timeouts/SQL behavior. These are intrusive, persistent changes done without a separate opt-in step. If you prefer not to have automatic registration or dependency patching, avoid running install scripts (e.g., use npm with scripts disabled) or review/modify scripts before running. - The code is coherent with its stated purpose (search/read/analyze/post). Still, review src/lib/client.ts and src/lib/cookies.ts yourself to confirm which remote endpoints are contacted and to validate error handling. Look for any unexpected outbound endpoints beyond the described XHS APIs. - The pre-scan flagged a base64-block inside SKILL.md. Inspect that encoded content to ensure it is benign (e.g., an embedded image or sample) and not malicious prompt injection or hidden instructions. - Safer ways to evaluate: run the CLI in an isolated environment or VM; test with a throwaway XHS account; or install without running postinstall (npm install --ignore-scripts) then manually inspect/enable the behaviors you want. If you rely on Claude Code integration, review ~/.claude/skills after installation and the package's postinstall script to confirm the symlink target. - If you are not comfortable with local modifications (symlink or dependency patches) or giving a CLI direct access to browser session cookies, do not install or only use a vetted, reviewed binary/source.

Type: OpenClaw Skill Name: redbook Version: 0.7.2 The redbook skill bundle is a legitimate CLI tool for Xiaohongshu (XHS) automation and analysis. It extracts browser cookies locally (via sweet-cookie and a CDP fallback in src/lib/cdp-cookies.ts) to authenticate with XHS APIs, which is consistent with its stated purpose. The post-install script (scripts/postinstall.js) performs targeted patches on its dependencies to fix specific bugs related to macOS keychain timeouts and BigInt handling, which is a functional requirement rather than a malicious act. The SKILL.md provides detailed operational instructions for AI agents, including safety guidelines such as rate limits, jitter, and dry-run requirements to prevent account bans. No evidence of data exfiltration, unauthorized remote control, or malicious prompt injection was found.