Xiaohongshu Collector

Work on Xiaohongshu post/comment collection, cookie handling, refresh flows, and browser plugin integration in the forbidden_company repo.

This skill is internally coherent for developing/operating Xiaohongshu collection in a local repo, but take these precautions before installing or invoking it: 1) Confirm the skill will run inside a trusted local copy of the 'forbidden_company' repo and review the referenced scripts (scripts/collect_xiaohongshu.py, scripts/admin_server.py, run_xiaohongshu_collection.sh and the browser-extension folder) for any network exfiltration or unexpected behavior. 2) Be aware SKILL.md instructs reading data/xiaohongshu-cookie.txt — treat that file as sensitive (do not paste its contents into chat) and verify who/what has access. 3) The package metadata did not declare that config path; verify that mismatch (it may be an oversight). 4) Ensure whatever collection you run complies with the target site's terms of service and applicable law (the skill's safety notes discourage shared-server mass scraping — prefer local, user-driven flows). 5) If you want stronger assurance, ask the publisher for the repo source or a code review of the referenced scripts before enabling autonomous invocation.

Type: OpenClaw Skill Name: xiaohongshu-collector Version: 1.0.0 The skill bundle provides instructions and workflow definitions for an AI agent to perform Xiaohongshu (XHS) data collection, including post and comment scraping, cookie management, and browser plugin integration. It references a specific repository structure (forbidden_company) and includes security-conscious rules, such as explicitly forbidding the output of sensitive cookies and emphasizing a local-first, user-driven collection model. No evidence of malicious intent, data exfiltration, or unauthorized execution was found in the provided files (SKILL.md, collector-workflow.md).