โ† Back to Skills Marketplace
osskn4w7

๐Ÿ“• ๅฐ็บขไนฆ Agent Skill

by OSSKn4w7 ยท GitHub โ†— ยท v1.0.0 ยท MIT-0
cross-platform โš  suspicious
320
Downloads
1
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install xiaohongshu-agent
Description
๐Ÿ“• ๅฐ็บขไนฆ (Xiaohongshu/RED) Skill - AI Agent ๆŽงๅˆถๅฐ็บขไนฆ๏ผŒๅ‘ๅธƒ็ฌ”่ฎฐใ€ๆœ็ดขๅ†…ๅฎนใ€็ฎก็†่ฏ„่ฎบ
Usage Guidance
What to consider before installing: - This skill needs your Xiaohongshu session cookie (XHS_COOKIE) to act on your account. The registry metadata did not declare this, but the code and README do โ€” do not install unless you accept providing that cookie. - The wrapper expects a cookies file at /root/.openclaw/workspace/xiaohongshu-cookies.md and will export it into XHS_COOKIE; that absolute path may not match your environment and could expose the cookie to other processes. Prefer using an environment variable you control if you proceed. - The README and SKILL.md instruct installing the xhs Python package from PyPI. Inspect the xhs library (and any transitive dependencies) before installing, and avoid --break-system-packages unless you understand the implications. Consider using an isolated virtualenv or container. - This skill can perform account actions (post/delete/comment). These are high-risk: frequent automated calls may trigger Xiaohongshu risk-control and lead to account restriction. Use test accounts and rate-limit calls. - If you want this skill to be considered coherent/benign, ask the maintainer to: (1) declare XHS_COOKIE (and the config file path, if they intend to use one) in the skill metadata, (2) avoid hardcoded absolute paths or make them configurable, and (3) provide an explicit install spec in the registry manifest.
Capability Analysis
Type: OpenClaw Skill Name: xiaohongshu-agent Version: 1.0.0 The skill provides a legitimate CLI interface for interacting with the Xiaohongshu (RED) platform using the 'xhs' Python library. It includes comprehensive documentation and explicit risk warnings regarding account safety and API rate limits. The code in 'xiaohongshu-cli.py' and 'xiaohongshu-wrapper.sh' follows standard practices for credential handling (via environment variables or local config files) and lacks any indicators of data exfiltration, obfuscation, or malicious intent.
Capability Assessment
โš  Purpose & Capability
Name/description match the included CLI and wrapper code: the skill provides search/publish/delete/comment/feed operations via the xhs Python SDK. However the registry metadata lists no required credentials or config paths while the code and SKILL.md clearly require an XHS cookie (XHS_COOKIE) or a cookies file. That mismatch (credential required but not declared) is an incoherence.
โš  Instruction Scope
Runtime instructions and provided wrapper/CLI stay within the stated purpose (calling Xiaohongshu APIs). But the wrapper reads a hardcoded config file (/root/.openclaw/workspace/xiaohongshu-cookies.md) and sets XHS_COOKIE from it; this file path is not declared in registry metadata. The SKILL.md also instructs users to copy their browser Cookie value, which is sensitive. No other system-wide files are read, and there is no obvious exfiltration to unexpected endpoints.
โ„น Install Mechanism
The skill is instruction-only from the registry perspective, but SKILL.md frontmatter and README instruct pip3 install xhs click (--break-system-packages). Installing third-party Python packages from PyPI is expected for this SDK, but the use of --break-system-packages and lack of an explicit install spec in registry metadata are noteworthy. No remote code downloads from obscure hosts or extracted archives are present in the bundle itself.
โš  Credentials
The code requires a session cookie (XHS_COOKIE) to operate, yet the registry lists no required env vars or primary credential. The wrapper attempts to load a cookie from a specific file under /root/.openclaw/workspace โ€” an absolute path that may expose the cookie to other processes or be incorrect on the user's system. Requiring a browser cookie is proportionate for this purpose but the omission from declared requirements and the hardcoded path are problematic.
โœ“ Persistence & Privilege
The skill does not request always:true, does not modify other skills, and has no persistent installation mechanism in the manifest. It runs as an invoked CLI wrapper and does not claim elevated privileges.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install xiaohongshu-agent
  3. After installation, invoke the skill by name or use /xiaohongshu-agent
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
๐Ÿ“• ๅˆๅง‹็‰ˆๆœฌ - AI Agent ๆŽงๅˆถๅฐ็บขไนฆ โœ… ๅŠŸ่ƒฝ: - ็ฌ”่ฎฐๆœ็ดข/ๅ‘ๅธƒ/ๅˆ ้™ค - ็”จๆˆทไฟกๆฏๆŸฅ่ฏข - ่ฏ„่ฎบ็ฎก็† - ้ฆ–้กตๆŽจ่ โš ๏ธโš ๏ธโš ๏ธ ่ญฆๅ‘Š: - ๅฏ่ƒฝ่งฆๅ‘้ฃŽๆŽงๅฏผ่‡ด่ดฆๅท้™ๅˆถ็”š่‡ณๅฐ็ฆ - ไป…ไพ›ๅญฆไน /็ ”็ฉถไฝฟ็”จ๏ผŒไธฅ็ฆๅ•†ไธš็”จ้€” - ๅฐ็บขไนฆ้ฃŽๆŽงไธฅๆ ผ๏ผŒไฝฟ็”จ้œ€่ฐจๆ…Ž ๐Ÿ”— GitHub: https://github.com/OSSKn4w7/xiaohongshu-skill
Metadata
Slug xiaohongshu-agent
Version 1.0.0
License MIT-0
All-time Installs 0
Active Installs 0
Total Versions 1
Frequently Asked Questions

What is ๐Ÿ“• ๅฐ็บขไนฆ Agent Skill?

๐Ÿ“• ๅฐ็บขไนฆ (Xiaohongshu/RED) Skill - AI Agent ๆŽงๅˆถๅฐ็บขไนฆ๏ผŒๅ‘ๅธƒ็ฌ”่ฎฐใ€ๆœ็ดขๅ†…ๅฎนใ€็ฎก็†่ฏ„่ฎบ. It is an AI Agent Skill for Claude Code / OpenClaw, with 320 downloads so far.

How do I install ๐Ÿ“• ๅฐ็บขไนฆ Agent Skill?

Run "/install xiaohongshu-agent" in the OpenClaw or Claude Code chat to install it in one step โ€” no extra setup required.

Is ๐Ÿ“• ๅฐ็บขไนฆ Agent Skill free?

Yes, ๐Ÿ“• ๅฐ็บขไนฆ Agent Skill is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does ๐Ÿ“• ๅฐ็บขไนฆ Agent Skill support?

๐Ÿ“• ๅฐ็บขไนฆ Agent Skill is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created ๐Ÿ“• ๅฐ็บขไนฆ Agent Skill?

It is built and maintained by OSSKn4w7 (@osskn4w7); the current version is v1.0.0.

๐Ÿ’ฌ Comments