← Back to Skills Marketplace
704
Downloads
1
Stars
1
Active Installs
2
Versions
Install in OpenClaw
/install rimet-xhs-spider
Description
自动化的小红书数据采集工具。支持获取博主基本信息、下载图文视频，以及提取笔记评论导出为 Excel。
Usage Guidance
This skill describes running a local Python CLI that needs your XHS session cookie. Before installing or using it: (1) confirm you have the actual 'cli.py' script and inspect its source — the skill provides no code or homepage; (2) avoid pasting your XHS_COOKIE into chat or untrusted UIs; prefer scoped API credentials if available; (3) run any unknown scripts in an isolated environment (container or VM) and review network activity; (4) verify legal and terms-of-service implications of scraping the site; (5) if you don't have the script, don't set the cookie system-wide — the skill as-supplied cannot be validated and may execute arbitrary local code.
Capability Analysis
Type: OpenClaw Skill
Name: rimet-xhs-spider
Version: 0.1.1
The skill bundle requests a sensitive session credential (XHS_COOKIE) and utilizes the 'exec' tool to run a local script (cli.py) that is not included in the provided file list. While the documentation in SKILL.md describes a legitimate scraping purpose, the combination of requiring high-value session cookies and executing unverified local code presents a significant security risk for credential theft or unauthorized execution.
Capability Assessment
Purpose & Capability
Name/description (XHS data collection) reasonably requires a Python runtime and an XHS session cookie to authenticate; those requirements are proportionate. However, the skill supplies no code, repository, or homepage — so it cannot run until a local 'cli.py' is present. The missing source makes intent and provenance unclear.
Instruction Scope
SKILL.md explicitly instructs the agent to call exec to run local commands like 'python cli.py --action ...'. That grants the agent permission to run arbitrary local Python code if present. The instructions do not include or verify the actual 'cli.py' implementation, do not restrict command parameters beyond examples, and do not describe safe handling of outputs. Because the skill relies on executing a local script of unknown provenance, there is risk the executed code could do more than described.
Install Mechanism
Instruction-only skill with no install spec and no external downloads — low supply-chain risk from the skill itself. The scanner had no files to analyze.
Credentials
Only XHS_COOKIE is requested, which is relevant for authenticated scraping. However, this cookie is a sensitive credential (session cookie) that could allow account access. Requiring a raw cookie is more sensitive than using an API token or OAuth flow; the skill does not explain how the cookie is used or stored.
Persistence & Privilege
Skill does not request persistent presence (always:false) and does not ask to modify other skills or global agent settings.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install rimet-xhs-spider - After installation, invoke the skill by name or use
/rimet-xhs-spider - Provide required inputs per the skill's parameter spec and get structured output
Version History
v0.1.1
Initial public release with major structural changes:
- Removed 22 files, including code, static assets, and utility modules, leaving only SKILL.md.
- Trimmed documentation and consolidated usage instructions in SKILL.md.
- Updated metadata to require Python and XHS_COOKIE environment variable.
- No executable code or auxiliary files are included in this version.
v0.1.0
Initial release of xhs-spider skill for 小红书数据采集.
- Enables automated collection of 小红书 (Xiaohongshu) user data, media downloads, and comment extraction.
- Supports exporting note comments and user/homepage info to Excel.
- Introduces command-line Python script operations for all actions.
- Requires XHS_COOKIE environment variable for authentication.
- Provides clear instructions for various data extraction and error handling scenarios.
Metadata
Frequently Asked Questions
What is Xhs Spider?
自动化的小红书数据采集工具。支持获取博主基本信息、下载图文视频，以及提取笔记评论导出为 Excel。 It is an AI Agent Skill for Claude Code / OpenClaw, with 704 downloads so far.
How do I install Xhs Spider?
Run "/install rimet-xhs-spider" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Xhs Spider free?
Yes, Xhs Spider is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Xhs Spider support?
Xhs Spider is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Xhs Spider?
It is built and maintained by rimetli (@rimetli); the current version is v0.1.1.
More Skills