小红书

XiaoHongShu (Little Red Book) data collection and interaction toolkit. Use when working with XiaoHongShu (小红书) platform for: (1) Searching and scraping notes/posts, (2) Getting user profiles and details, (3) Extracting comments and likes, (4) Following users and liking posts, (5) Fetching home feed and trending content. Automatically handles all encryption parameters (cookies, headers) including a1, webId, x-s, x-s-common, x-t, sec_poison_id, websectiga, gid, x-b3-traceid, x-xray-traceid. Supports guest mode and authenticated sessions via web_session cookie.

Only install after reviewing the code and accepting the account and platform-policy risks. Treat web_session as a password-equivalent secret, avoid putting it in chats or logs, remove or disable the read-count metrics flow, add explicit confirmation for all follow/like/comment/delete actions, replace eval() config parsing, redact cookies from logs, and pin dependencies before use.

Type: OpenClaw Skill Name: xiaohongshutools Version: 0.1.0 The skill is designed for web scraping and interaction with XiaoHongShu, employing sophisticated reverse-engineering techniques to bypass anti-bot measures. While its functionality aligns with the stated purpose, the nature of web scraping, anti-bot bypass, and the capability to handle security challenges (like QR code logins) without clear malicious intent, classifies it as suspicious. There is no evidence of data exfiltration to unauthorized endpoints, persistence, or unauthorized remote control. The hardcoded path in SKILL.md and a hardcoded fingerprint example in scripts/request/web/encrypt/other/XhsFpGenerator.py are minor concerns but do not indicate malicious intent.