小红书

XiaoHongShu (Little Red Book) data collection and interaction toolkit. Use when working with XiaoHongShu (小红书) platform for: (1) Searching and scraping notes/posts, (2) Getting user profiles and details, (3) Extracting comments and likes, (4) Following users and liking posts, (5) Fetching home feed and trending content. Automatically handles all encryption parameters (cookies, headers) including a1, webId, x-s, x-s-common, x-t, sec_poison_id, websectiga, gid, x-b3-traceid, x-xray-traceid. Supports guest mode and authenticated sessions via web_session cookie.

Install only if you understand that this can use a XiaoHongShu session cookie to act as your account. Avoid important accounts, do not paste cookies into shared logs or chats, and review or remove the read-count metrics workflow, comment mutation APIs, session-cookie logging, and eval-based config parser before using it in production.

Type: OpenClaw Skill Name: xiaohongshutools Version: 0.1.0 The skill is designed for web scraping and interaction with XiaoHongShu, employing sophisticated reverse-engineering techniques to bypass anti-bot measures. While its functionality aligns with the stated purpose, the nature of web scraping, anti-bot bypass, and the capability to handle security challenges (like QR code logins) without clear malicious intent, classifies it as suspicious. There is no evidence of data exfiltration to unauthorized endpoints, persistence, or unauthorized remote control. The hardcoded path in SKILL.md and a hardcoded fingerprint example in scripts/request/web/encrypt/other/XhsFpGenerator.py are minor concerns but do not indicate malicious intent.