by 安全扫描
OpenClaw
安全
high confidenceNULL
评估建议
The skill appears coherent and limited to using a browser automation tool to collect autocomplete suggestions. Before installing or using it, consider: (1) the skill has no published source or homepage — provenance is unknown, so test in a limited environment first; (2) Xiaohongshu may require login or present captchas — you may need to authenticate interactively and the skill does not store credentials; (3) scraping may violate site terms of service or trigger rate limits/anti-bot measures — us...详细分析 ▾
✓ 用途与能力
The name/description describe browser-based scraping of Xiaohongshu autocomplete suggestions and the SKILL.md only requires the browser tool and user-provided keywords — there are no unrelated credentials, binaries, or installs requested.
✓ 指令范围
Instructions are narrowly focused: open the Explore page, input keywords, wait for the suggestion dropdown, collect suggestions, and return results. They do not tell the agent to read local files, access unrelated environment variables, or transmit data to third-party endpoints.
✓ 安装机制
This is instruction-only with no install spec and no code files, so nothing will be downloaded or written to disk as part of install — lowest-risk model for installation behavior.
✓ 凭证需求
No environment variables, credentials, or config paths are requested. Notes mention possible login or captchas but do not ask for or store user secrets in the skill itself.
✓ 持久化与权限
The skill is not forced-on (always: false) and does not request elevated or persistent system privileges. It relies on the standard browser tool and normal agent invocation behavior.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.22026/3/23
NULL
● 无害
安装命令
点击复制官方npx clawhub@latest install xiaohongshu-keyword-collector
镜像加速npx clawhub@latest install xiaohongshu-keyword-collector --registry https://cn.longxiaskill.com镜像同步中