Xiaohongshu MCP Installer

一键安装并启动小红书 MCP 服务（xiaohongshu-mcp）。当用户说"帮我安装小红书MCP"、"安装 xhs-mcp"、"配置小红书 MCP"、"帮我搞个小红书"、或提供 GitHub 链接 https://github.com/xpzouying/xiaohongshu-mcp 时触发。自动检测系统、...

What to consider before installing: - The script will download a prebuilt binary from GitHub releases and execute it on your machine. That binary can run arbitrary code; only proceed if you trust the project and its release artifacts. - The provided install.sh assumes tools beyond curl: python3 (used to parse GitHub API), tar (to extract), lsof, systemctl, sudo, and cron/launchctl. If those are missing the installer will fail or behave unexpectedly. - The installer requires privileged actions (sudo) to write a systemd unit and enable/start it. It also creates a persistent launchd plist or crontab entry and a watchdog script. These changes are persistent and survive reboots. - There are small but important inconsistencies: SKILL.md contains a systemd example that uses /root/xiaohongshu-mcp while the included scripts install to $HOME/xiaohongshu-mcp. This suggests copy/paste/documentation drift — double-check paths before running to avoid installing as root unintentionally. - The script does not verify release integrity (no signature or checksum verification). Prefer to: - Inspect the GitHub repository and release artifacts manually first. - Download the release artifact and inspect its contents (and ideally verify checksum/signature) before making it executable. - Run the service in a confined environment (VM, container, or non-privileged user) first to evaluate behavior. - If you must install on a host, edit the install script to remove automatic sudo or systemd writes and perform those steps manually after review. Given these points, the skill appears to implement its stated function but has gaps and elevated privileges that make it risky to run without manual review — treat it as suspicious and verify the binary and repository before proceeding.

Type: OpenClaw Skill Name: xhs-mcp-installer Version: 1.0.0 The skill functions as a one-click installer that downloads and executes a binary from a third-party GitHub repository (xpzouying/xiaohongshu-mcp) and establishes system-level persistence via systemd, launchd, and crontab. While these actions align with the stated purpose of installing a service, the practice of downloading unverified binaries and requesting sudo privileges for service configuration (in scripts/install.sh and SKILL.md) represents a high-risk pattern. No explicit evidence of data exfiltration or intentional malice was found in the provided code logic.