← 返回 Skills 市场
osskn4w7

📕 小红书 Agent Skill

作者 OSSKn4w7 · GitHub ↗ · v1.0.0 · MIT-0
cross-platform ⚠ suspicious
320
总下载
1
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install xiaohongshu-agent
功能描述
📕 小红书 (Xiaohongshu/RED) Skill - AI Agent 控制小红书,发布笔记、搜索内容、管理评论
安全使用建议
What to consider before installing: - This skill needs your Xiaohongshu session cookie (XHS_COOKIE) to act on your account. The registry metadata did not declare this, but the code and README do — do not install unless you accept providing that cookie. - The wrapper expects a cookies file at /root/.openclaw/workspace/xiaohongshu-cookies.md and will export it into XHS_COOKIE; that absolute path may not match your environment and could expose the cookie to other processes. Prefer using an environment variable you control if you proceed. - The README and SKILL.md instruct installing the xhs Python package from PyPI. Inspect the xhs library (and any transitive dependencies) before installing, and avoid --break-system-packages unless you understand the implications. Consider using an isolated virtualenv or container. - This skill can perform account actions (post/delete/comment). These are high-risk: frequent automated calls may trigger Xiaohongshu risk-control and lead to account restriction. Use test accounts and rate-limit calls. - If you want this skill to be considered coherent/benign, ask the maintainer to: (1) declare XHS_COOKIE (and the config file path, if they intend to use one) in the skill metadata, (2) avoid hardcoded absolute paths or make them configurable, and (3) provide an explicit install spec in the registry manifest.
功能分析
Type: OpenClaw Skill Name: xiaohongshu-agent Version: 1.0.0 The skill provides a legitimate CLI interface for interacting with the Xiaohongshu (RED) platform using the 'xhs' Python library. It includes comprehensive documentation and explicit risk warnings regarding account safety and API rate limits. The code in 'xiaohongshu-cli.py' and 'xiaohongshu-wrapper.sh' follows standard practices for credential handling (via environment variables or local config files) and lacks any indicators of data exfiltration, obfuscation, or malicious intent.
能力评估
Purpose & Capability
Name/description match the included CLI and wrapper code: the skill provides search/publish/delete/comment/feed operations via the xhs Python SDK. However the registry metadata lists no required credentials or config paths while the code and SKILL.md clearly require an XHS cookie (XHS_COOKIE) or a cookies file. That mismatch (credential required but not declared) is an incoherence.
Instruction Scope
Runtime instructions and provided wrapper/CLI stay within the stated purpose (calling Xiaohongshu APIs). But the wrapper reads a hardcoded config file (/root/.openclaw/workspace/xiaohongshu-cookies.md) and sets XHS_COOKIE from it; this file path is not declared in registry metadata. The SKILL.md also instructs users to copy their browser Cookie value, which is sensitive. No other system-wide files are read, and there is no obvious exfiltration to unexpected endpoints.
Install Mechanism
The skill is instruction-only from the registry perspective, but SKILL.md frontmatter and README instruct pip3 install xhs click (--break-system-packages). Installing third-party Python packages from PyPI is expected for this SDK, but the use of --break-system-packages and lack of an explicit install spec in registry metadata are noteworthy. No remote code downloads from obscure hosts or extracted archives are present in the bundle itself.
Credentials
The code requires a session cookie (XHS_COOKIE) to operate, yet the registry lists no required env vars or primary credential. The wrapper attempts to load a cookie from a specific file under /root/.openclaw/workspace — an absolute path that may expose the cookie to other processes or be incorrect on the user's system. Requiring a browser cookie is proportionate for this purpose but the omission from declared requirements and the hardcoded path are problematic.
Persistence & Privilege
The skill does not request always:true, does not modify other skills, and has no persistent installation mechanism in the manifest. It runs as an invoked CLI wrapper and does not claim elevated privileges.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install xiaohongshu-agent
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /xiaohongshu-agent 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
📕 初始版本 - AI Agent 控制小红书 ✅ 功能: - 笔记搜索/发布/删除 - 用户信息查询 - 评论管理 - 首页推荐 ⚠️⚠️⚠️ 警告: - 可能触发风控导致账号限制甚至封禁 - 仅供学习/研究使用,严禁商业用途 - 小红书风控严格,使用需谨慎 🔗 GitHub: https://github.com/OSSKn4w7/xiaohongshu-skill
元数据
Slug xiaohongshu-agent
版本 1.0.0
许可证 MIT-0
累计安装 0
当前安装数 0
历史版本数 1
常见问题

📕 小红书 Agent Skill 是什么?

📕 小红书 (Xiaohongshu/RED) Skill - AI Agent 控制小红书,发布笔记、搜索内容、管理评论. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 320 次。

如何安装 📕 小红书 Agent Skill?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install xiaohongshu-agent」即可一键安装,无需额外配置。

📕 小红书 Agent Skill 是免费的吗?

是的,📕 小红书 Agent Skill 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

📕 小红书 Agent Skill 支持哪些平台?

📕 小红书 Agent Skill 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 📕 小红书 Agent Skill?

由 OSSKn4w7(@osskn4w7)开发并维护,当前版本 v1.0.0。

💬 留言讨论