xiaohongshu-extract

Extract metadata from Xiaohongshu (XHS) share or discovery URLs by parsing window.__INITIAL_STATE__ and returning note details. Use when asked to fetch XHS page content, note metadata, video info, or engagement stats from a public XHS link.

This skill appears to do what it claims (fetch an XHS page and parse window.__INITIAL_STATE__). Before installing or invoking it: (1) Be careful what URLs you provide — the script will make HTTP requests to any given URL and could fetch internal/metadata endpoints (SSRF risk). Do not pass sensitive or private URLs. (2) The script returns streaming URLs it finds but does not itself download video files. (3) Ensure the runtime has Python and the requests package available and run the skill in an isolated environment if you are concerned about network exposure. If you need stricter safety, require or validate that input URLs belong to official Xiaohongshu domains before invocation.

Type: OpenClaw Skill Name: Developer: Version: Description: OpenClaw Agent Skill Suspicious High-Entropy/Eval files: 1 The OpenClaw skill 'xiaohongshu-extract' is designed to extract metadata from Xiaohongshu URLs. The `SKILL.md` provides clear, benign instructions for the agent to use the bundled Python script `scripts/xiaohongshu_extract.py`. The Python script uses the `requests` library to fetch the user-provided URL and parses the HTML to extract JSON data. It includes standard features like writing output to a file, which is not indicative of malicious intent. There is no evidence of data exfiltration, malicious execution, persistence, or prompt injection attempts against the agent to perform actions outside the stated purpose.