小红书搜索摘要

Searches Xiaohongshu(小红书) for a given keyword, extracts the top N posts (including texts, images, and user comments), and then synthesizes a comprehensive fi...

This skill appears to do what it claims, but consider these points before installing/ running it: - Runtime npm fetch: run.sh uses npx @playwright/cli which may download and execute code from npm at runtime. If you prefer, preinstall Playwright (npm install -g @playwright/cli or your platform package) to avoid dynamic downloads. - File access: the agent is instructed to read and 'see' image files saved in OUTPUT_DIRECTORY. Only run this skill in an environment where the agent is allowed to read those files and where saving scraped content is acceptable. - Legal/ToS: scraping Xiaohongshu may violate the site’s terms of service or local law; ensure you have the right to collect and store the content you pull. - Isolation: because the skill executes a headful browser script and downloads images, run it in an isolated or trusted environment (sandbox or dedicated workspace) if you are concerned about supply-chain or scraping risks. - Review output: parsed markdown embeds local image paths; verify the OUTPUT_DIRECTORY and files before sharing externally. If you want higher assurance, request a version that avoids npx (preinstalled playwright) and/or a reproducible pinned package manifest so no dynamic remote code is executed at runtime.

Type: OpenClaw Skill Name: xhs-search-summarizer-seckho Version: 1.0.3 The skill is a legitimate tool for scraping and summarizing Xiaohongshu (小红书) posts. It uses a bash script (run.sh) to orchestrate a Playwright-based scraper and a Python script (parse.py) to process the results and download images. The code includes security best practices, such as domain validation for image downloads (restricting to .xhscdn.com and .xiaohongshu.com) and input validation for the number of posts. No evidence of data exfiltration, malicious execution, or harmful prompt injection was found.