xhs-search

小红书内容搜索技能。通过 MCP 协议调用 xiaohongshu-mcp 工具，搜索小红书笔记、用户主页、评论等。支持关键词搜索、热度排序、内容详情提取。当用户说"搜一下小红书"、"分析小红书"、"查找小红书帖子"、"生成小红书报告"时触发此技能。

This skill appears to implement a legitimate local client for searching XiaoHongShu, but it requires you to install a third‑party binary that asks you to log in via QR and stores local cookies. That external tool exposes both read and write APIs (search, get_detail, but also like_feed and publish_content). Before installing: 1) review the xiaohongshu-mcp GitHub repo and its source code or build from source; 2) verify the release artifact (checksums/signatures) rather than blindly running the tarball; 3) consider running the MCP tool in an isolated environment (VM/container) and not with your main account, since cookies can be long‑lived; 4) if you will allow autonomous agent invocation, explicitly restrict the skill to read-only methods or disable autonomous invocation until you can enforce safeguards; 5) be aware that installing and running the provided binary grants it the ability to perform actions on your XiaohongShu account (likes, posts), so proceed only if you trust the third‑party tool and understand the risk.

Type: OpenClaw Skill Name: xhs-search Version: 1.0.1 The skill requires downloading and executing external binaries from a third-party GitHub repository (xpzouying/xiaohongshu-mcp) as detailed in SKILL.md. While the Python script scripts/xhs_search.py is a standard wrapper for local MCP communication, the setup process involves high-risk actions such as running a local server that handles Xiaohongshu authentication cookies and suggesting persistence via system services. The reliance on unverified external binaries and the handling of session data make this bundle suspicious, though no direct evidence of intentional malice was found.