← 返回 Skills 市场
704
总下载
1
收藏
1
当前安装
2
版本数
在 OpenClaw 中安装
/install rimet-xhs-spider
功能描述
自动化的小红书数据采集工具。支持获取博主基本信息、下载图文视频，以及提取笔记评论导出为 Excel。
安全使用建议
This skill describes running a local Python CLI that needs your XHS session cookie. Before installing or using it: (1) confirm you have the actual 'cli.py' script and inspect its source — the skill provides no code or homepage; (2) avoid pasting your XHS_COOKIE into chat or untrusted UIs; prefer scoped API credentials if available; (3) run any unknown scripts in an isolated environment (container or VM) and review network activity; (4) verify legal and terms-of-service implications of scraping the site; (5) if you don't have the script, don't set the cookie system-wide — the skill as-supplied cannot be validated and may execute arbitrary local code.
功能分析
Type: OpenClaw Skill
Name: rimet-xhs-spider
Version: 0.1.1
The skill bundle requests a sensitive session credential (XHS_COOKIE) and utilizes the 'exec' tool to run a local script (cli.py) that is not included in the provided file list. While the documentation in SKILL.md describes a legitimate scraping purpose, the combination of requiring high-value session cookies and executing unverified local code presents a significant security risk for credential theft or unauthorized execution.
能力评估
Purpose & Capability
Name/description (XHS data collection) reasonably requires a Python runtime and an XHS session cookie to authenticate; those requirements are proportionate. However, the skill supplies no code, repository, or homepage — so it cannot run until a local 'cli.py' is present. The missing source makes intent and provenance unclear.
Instruction Scope
SKILL.md explicitly instructs the agent to call exec to run local commands like 'python cli.py --action ...'. That grants the agent permission to run arbitrary local Python code if present. The instructions do not include or verify the actual 'cli.py' implementation, do not restrict command parameters beyond examples, and do not describe safe handling of outputs. Because the skill relies on executing a local script of unknown provenance, there is risk the executed code could do more than described.
Install Mechanism
Instruction-only skill with no install spec and no external downloads — low supply-chain risk from the skill itself. The scanner had no files to analyze.
Credentials
Only XHS_COOKIE is requested, which is relevant for authenticated scraping. However, this cookie is a sensitive credential (session cookie) that could allow account access. Requiring a raw cookie is more sensitive than using an API token or OAuth flow; the skill does not explain how the cookie is used or stored.
Persistence & Privilege
Skill does not request persistent presence (always:false) and does not ask to modify other skills or global agent settings.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install rimet-xhs-spider - 安装完成后，直接呼叫该 Skill 的名称或使用
/rimet-xhs-spider触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v0.1.1
Initial public release with major structural changes:
- Removed 22 files, including code, static assets, and utility modules, leaving only SKILL.md.
- Trimmed documentation and consolidated usage instructions in SKILL.md.
- Updated metadata to require Python and XHS_COOKIE environment variable.
- No executable code or auxiliary files are included in this version.
v0.1.0
Initial release of xhs-spider skill for 小红书数据采集.
- Enables automated collection of 小红书 (Xiaohongshu) user data, media downloads, and comment extraction.
- Supports exporting note comments and user/homepage info to Excel.
- Introduces command-line Python script operations for all actions.
- Requires XHS_COOKIE environment variable for authentication.
- Provides clear instructions for various data extraction and error handling scenarios.
元数据
常见问题
Xhs Spider 是什么？
自动化的小红书数据采集工具。支持获取博主基本信息、下载图文视频，以及提取笔记评论导出为 Excel。 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 704 次。
如何安装 Xhs Spider？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install rimet-xhs-spider」即可一键安装，无需额外配置。
Xhs Spider 是免费的吗？
是的，Xhs Spider 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Xhs Spider 支持哪些平台？
Xhs Spider 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Xhs Spider？
由 rimetli（@rimetli）开发并维护，当前版本 v0.1.1。
推荐 Skills