小红书

XiaoHongShu (Little Red Book) data collection and interaction toolkit. Use when working with XiaoHongShu (小红书) platform for: (1) Searching and scraping notes/posts, (2) Getting user profiles and details, (3) Extracting comments and likes, (4) Following users and liking posts, (5) Fetching home feed and trending content. Automatically handles all encryption parameters (cookies, headers) including a1, webId, x-s, x-s-common, x-t, sec_poison_id, websectiga, gid, x-b3-traceid, x-xray-traceid. Supports guest mode and authenticated sessions via web_session cookie.

Install only if you are comfortable giving a local automation tool access to a XiaoHongShu session that can act as your account. Avoid using important accounts, do not paste real web_session cookies into code, chats, or logs, and review or remove the read-count metrics workflow, comment mutation APIs, cookie-bearing fingerprint fields, session-cookie logging, and eval-based config parser before operational use.

Type: OpenClaw Skill Name: xiaohongshutools Version: 0.1.0 The skill is designed for web scraping and interaction with XiaoHongShu, employing sophisticated reverse-engineering techniques to bypass anti-bot measures. While its functionality aligns with the stated purpose, the nature of web scraping, anti-bot bypass, and the capability to handle security challenges (like QR code logins) without clear malicious intent, classifies it as suspicious. There is no evidence of data exfiltration to unauthorized endpoints, persistence, or unauthorized remote control. The hardcoded path in SKILL.md and a hardcoded fingerprint example in scripts/request/web/encrypt/other/XhsFpGenerator.py are minor concerns but do not indicate malicious intent.