← 返回 Skills 市场
665
总下载
0
收藏
1
当前安装
1
版本数
在 OpenClaw 中安装
/install xhs-video-downloader
功能描述
Download videos from Xiaohongshu (小红书) pages. Use when the user wants to save or download a video from a xiaohongshu.com URL, or mentions "小红书视频下载", "保存小红书视频...
安全使用建议
This skill appears to do exactly what it claims: fetch a Xiaohongshu page, find the CDN/video URL, and download the file. Before installing/using it: 1) Be sure downloading the video complies with Xiaohongshu's terms and copyright law. 2) You must have Python3 and the 'requests' package (pip install requests) to run the script; the SKILL.md does not auto-install dependencies. 3) The tool will make network requests to whatever URL you supply and save files to ~/Downloads/xiaohongshu — do not pass untrusted or unknown URLs. 4) For pages requiring JS rendering, follow the browser automation method (it runs a small JS snippet in the page context to locate .mp4 URLs). 5) If you need stronger assurances, inspect or run the Python script in a sandbox before use.
功能分析
Type: OpenClaw Skill
Name: xhs-video-downloader
Version: 1.0.0
The skill's stated purpose of downloading Xiaohongshu videos is legitimate. The `SKILL.md` instructions for the AI agent are clear and do not show signs of prompt injection or malicious intent. However, the `scripts/download_video.py` file contains a path traversal vulnerability. The script constructs the output file path using user-provided `output_dir` and `--filename` arguments without sufficient sanitization, which could allow an attacker to write files to arbitrary locations on the filesystem (e.g., `../../etc/passwd`) if a malicious path is supplied via prompt injection to the agent or direct execution.
能力评估
Purpose & Capability
Name/description (download Xiaohongshu videos) matches the provided SKILL.md and the included Python script. Nothing in the repo requests unrelated credentials or system access.
Instruction Scope
SKILL.md confines actions to loading the Xiaohongshu page (optionally via browser automation), running a small JS snippet to find .mp4/xhscdn URLs, and downloading with curl or the included Python script. The JS snippet and script only target page HTML and CDN URLs; they do not read unrelated files or environment variables. Note: the browser automation step executes JS in the page context (expected for extracting rendered SPA content).
Install Mechanism
No install spec (instruction-only) which limits installation risk. The included Python script depends on the third‑party 'requests' package but the skill does not provide an automated install step—user must pip install requests themselves. No downloads from untrusted URLs or archive extraction are present.
Credentials
The skill requires no credentials, config paths, or environment variables. It performs outbound HTTP(S) requests to the target Xiaohongshu page and to CDN URLs (expected for downloading video content). It writes files to ~/Downloads/xiaohongshu by default (reasonable for a downloader).
Persistence & Privilege
Skill is not always-on and does not request elevated or persistent privileges. It does not modify other skills or global agent settings.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install xhs-video-downloader - 安装完成后，直接呼叫该 Skill 的名称或使用
/xhs-video-downloader触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
Initial release - Download videos from Xiaohongshu (小红书) via browser automation
元数据
常见问题
XHS Video Downloader 是什么？
Download videos from Xiaohongshu (小红书) pages. Use when the user wants to save or download a video from a xiaohongshu.com URL, or mentions "小红书视频下载", "保存小红书视频... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 665 次。
如何安装 XHS Video Downloader？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install xhs-video-downloader」即可一键安装，无需额外配置。
XHS Video Downloader 是免费的吗？
是的，XHS Video Downloader 完全免费（开源免费），可自由下载、安装和使用。
XHS Video Downloader 支持哪些平台？
XHS Video Downloader 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 XHS Video Downloader？
由 KINO（@hviktortsoi）开发并维护，当前版本 v1.0.0。
推荐 Skills