Fähigkeiten xhs-content-research

📦

xhs-content-research

Name: xhs-content-research
Author: devinchen2014

Inhaltsrevision r1 Mittleres Risiko ⚙️ Externe Befehle🌐 Netzwerkzugriff🔑 Umgebungsvariablen

Research Xiaohongshu Content and Topic Samples

Content teams need traceable samples before choosing topics or comparing competitors. This skill guides SocialDataX searches and separates observed evidence from content recommendations.

Unterstützt: Claude Codex Code(CC)

📊 64 Angemessen

Maintain this Skill? Claim it 📊 64 Angemessen

Mit meinem Agent installieren

Kopieren Sie diese Anfrage in Ihren Agent. Sie enthält die maßgebliche Skill-Seite und das Manifest.

Agent-Anfrage

Review the Skillstore skill "xhs-content-research" from https://skillstore.io/skills/devinchen2014-xhs-content-research.md and its manifest at https://skillstore.io/api/skills/devinchen2014-xhs-content-research/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Ihr Agent sollte weiterhin seinen Plan anzeigen und alle von der Sicherheitsrichtlinie verlangten Bestätigungen anfordern.

Agent-lesbare Ressourcen

Verwenden Sie diese Links, wenn ein KI-Agent, Crawler oder Skript sauberen Kontext benötigt, statt die vollständige Seite zu lesen.

Markdown-Detailseite GET /skills/devinchen2014-xhs-content-research.md Signiertes manifest GET /api/skills/devinchen2014-xhs-content-research/manifest Signiertes lockfile GET /api/skills/devinchen2014-xhs-content-research/lockfile

Testen

„xhs-content-research“ wird verwendet. Show an illustrative research brief for a one-page search about compact home offices.

Erwartetes Ergebnis:

Illustrative format only: no live search was performed.
Sample evidence: list each returned title, author, and content identifier.
Interpretation: group supported themes separately from proposed content angles.
Coverage: one result page cannot establish platform-wide trends.

„xhs-content-research“ wird verwendet. Show an illustrative status report when a three-page search stops after two pages.

Erwartetes Ergebnis:

Illustrative recovery status: two pages collected; results remain incomplete.
Keep collected items and the original error.
After resolving the error, continue with the returned cursor and matching filters for the remaining page.
If the cursor is empty, report the interruption instead of automatically restarting.

Sicherheitsaudit

Mittleres Risiko

v1 • 2.11.2026 Versionsbericht öffnen

Forty static findings are false positives involving Markdown syntax, service links, documented authentication, or readable multilingual text. One finding confirms execution of an unpinned npm package; a separate semantic finding concerns mandatory sharing of token-bearing result URLs. No evidence found of audit manipulation, encoded payloads, or API-key exfiltration in the two supplied files; external package behavior was not reviewed.

Gescannte Dateien

110

Analysierte Zeilen

Prüfelemente

Falschmeldungen ignoriert

Bestätigte Sicherheitsbedenken (1)

Mittel

SKILL.md:62

Unconditional Exposure of Token-Bearing Result URLs

Line 62 requires preserving 'xsec_token' in every displayed, stored, or forwarded note_url and explicitly forbids redaction. This can unnecessarily expose access-related URL tokens outside the retrieval context.

The unconditional sharing and no-redaction instruction is explicit. Token privileges and lifetime are undocumented, so account compromise is not established.

Elemente der Fähigkeitsprüfung (1)

Dies sind echte lokale Fähigkeiten, die für diese Fähigkeit erwartet werden können; daher müssen sie überprüft werden, werden jedoch nicht als bestätigtes bösartiges Verhalten gezählt.

Mittel

SKILL.md:31-39

Ruby/shell backtick execution

```bash

The fenced examples invoke npx -y socialdatax-skills@latest, executing a mutable external package without an installation prompt. This creates supply-chain exposure in an environment intended to contain the API key.

Risikofaktoren

⚙️ Externe Befehle (29)

🌐 Netzwerkzugriff (3)

SKILL.md:7 SKILL.md:25 SKILL.md:92

🔑 Umgebungsvariablen (6)

SKILL.md:7 SKILL.md:25 SKILL.md:81 SKILL.md:91 SKILL.md:93 SKILL.md:99

Geprüft von: codex

Diesen Bericht teilen & zitieren

Teile den versionierten Bewertungsbericht, das neutrale Badge, die Einbettungskarte und Zitate. Skillstore berichtet Nachweise, ohne zu entscheiden, ob dieser Skill sicher ist.

Versionsbericht öffnen

Berichtslink kopieren

https://skillstore.io/skills/devinchen2014-xhs-content-research/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown-Badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/devinchen2014-xhs-content-research/security.svg)](https://skillstore.io/skills/devinchen2014-xhs-content-research?utm_source=security_passport_badge)

HTML-Badge

<a href="https://skillstore.io/skills/devinchen2014-xhs-content-research?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/devinchen2014-xhs-content-research/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Einbettungskarte

<iframe src="https://skillstore.io/embed/skills/devinchen2014-xhs-content-research.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Wissenschaftliche Zitate (APA · BibTeX · CFF)

APA-Zitat

devinchen2014. (2026). xhs-content-research security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/devinchen2014-xhs-content-research/audits/1

BibTeX-Zitat

@techreport{devinchen2014-devinchen2014-xhs-content-research-2026,
  author = {devinchen2014},
  title = {xhs-content-research security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/devinchen2014-xhs-content-research/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "xhs-content-research security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "devinchen2014"
date-released: "2026-11-02"
url: "https://skillstore.io/skills/devinchen2014-xhs-content-research/audits/1"
identifiers:
  - type: other
    value: "skillstore:devinchen2014-xhs-content-research:audit:1"
    description: "Skillstore immutable audit report identifier"

Skillstore-Score

Warum dieser Score Evidenzvertrauen: Mittel

Architektur

Wartbarkeit

Inhalt

Gemeinschaft

Spezifikationskonformität

Was Sie erstellen können

Explore New Content Angles

Collect focused keyword samples and identify evidence-backed angles for a new content series.

Compare Competitor Messaging

Compare returned competitor samples by topic, creator positioning, and visible audience feedback.

Prepare a Weekly Topic Brief

Review recent samples within explicit page limits and organize findings for an editorial planning meeting.

Diese Prompts ausprobieren

Collect a First Sample

Find one page of Xiaohongshu results for [keyword]. List returned titles and authors, then separate observations from suggested content angles.

Review Recent Topics

Research [topic] from the last seven days using the CLI, capped at three pages. Report available publication evidence and coverage limits.

Compare Two Brands

Compare [brand A] and [brand B] with matching filters and a maximum of 20 results each. Distinguish returned evidence from interpretation.

Resume an Interrupted Search

Resume [query] using its saved cursor and original filters. Deduct collected pages and items from original limits, preserve partial results, and report gaps.

Bewährte Praktiken

Start with one page and define page or item limits before expanding a search.
Use a reviewed, pinned CLI release and keep API keys in environment configuration rather than prompts or reports.
Separate evidence from inference, state sampling limits, and review token-bearing URLs before sharing results.

Vermeiden

Treating a limited search sample as complete Xiaohongshu coverage or proof of a platform-wide trend.
Changing query filters while reusing an old cursor, or restarting partial searches without adjusting remaining limits.
Executing an unreviewed latest package or distributing token-bearing URLs without checking authorization and sensitivity.

Häufig gestellte Fragen

What platforms does this skill research?

It focuses on Xiaohongshu, also called XHS or RedNote, through the documented SocialDataX search interfaces.

What setup is required?

Configure SOCIALDATAX_API_KEY and service access. The preferred CLI requires Node.js and npm; the MCP alternative requires an available xhs_search_notes tool.

Can it publish posts or modify accounts?

The supplied instructions document read-only searches. They do not provide login, posting, liking, commenting, or account-modification workflows.

Does it provide complete trend coverage?

No. Results depend on keywords, filters, returned pages, and available publication timestamps. Conclusions must state those limits.

How should interrupted searches be resumed?

Preserve collected items and errors. Continue only with a nonempty returned cursor, unchanged filters, and remaining page or item limits.

What security precautions matter?

Review and pin the CLI dependency, protect API keys, and assess token-bearing URLs before sharing. The external package implementation was not audited.