Fähigkeiten xhs-creator-content-research

📦

xhs-creator-content-research

Name: xhs-creator-content-research
Author: devinchen2014

Inhaltsrevision r1 Mittleres Risiko ⚙️ Externe Befehle🌐 Netzwerkzugriff🔑 Umgebungsvariablen

Research Xiaohongshu Creator Content

Creator research requires consistent post evidence across accounts and publishing periods. This skill guides SocialDataX retrieval and organizes available titles, timestamps, engagement signals, and comparison observations.

Unterstützt: Claude Codex Code(CC)

📊 64 Angemessen

Maintain this Skill? Claim it 📊 64 Angemessen

Mit meinem Agent installieren

Kopieren Sie diese Anfrage in Ihren Agent. Sie enthält die maßgebliche Skill-Seite und das Manifest.

Agent-Anfrage

Review the Skillstore skill "xhs-creator-content-research" from https://skillstore.io/skills/devinchen2014-xhs-creator-content-research.md and its manifest at https://skillstore.io/api/skills/devinchen2014-xhs-creator-content-research/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Ihr Agent sollte weiterhin seinen Plan anzeigen und alle von der Sicherheitsrichtlinie verlangten Bestätigungen anfordern.

Agent-lesbare Ressourcen

Verwenden Sie diese Links, wenn ein KI-Agent, Crawler oder Skript sauberen Kontext benötigt, statt die vollständige Seite zu lesen.

Markdown-Detailseite GET /skills/devinchen2014-xhs-creator-content-research.md Signiertes manifest GET /api/skills/devinchen2014-xhs-creator-content-research/manifest Signiertes lockfile GET /api/skills/devinchen2014-xhs-creator-content-research/lockfile

Testen

„xhs-creator-content-research“ wird verwendet. Review one page from a selected creator profile and summarize the content.

Erwartetes Ergebnis:

Illustrative summary: The retrieved sample emphasizes product demonstrations and practical advice.
Evidence: Available titles, publishing times, engagement signals, and complete note identifiers accompany each observation.
Coverage: One page was reviewed. Earlier posts and missing fields were not inferred.

„xhs-creator-content-research“ wird verwendet. Compare two creator samples when the second account returns incomplete results.

Erwartetes Ergebnis:

Illustrative comparison: Account A emphasizes tutorials; the available Account B sample emphasizes product reviews.
Coverage: Account B returned partial results, so engagement comparisons remain provisional.
Recovery: Preserve collected posts and continue only with a valid returned token and the remaining collection limits.

Sicherheitsaudit

Mittleres Risiko

v1 • 2.11.2026 Versionsbericht öffnen

All 39 static alerts are false positives involving Markdown, service documentation, credential variable names, account identifiers, and readable multilingual text. The instructions separately introduce a supply chain risk by running an unpinned npm package with automatic installation approval. No evidence found of prompt injection, embedded credentials, or intentional exfiltration; the external package implementation was not included for verification.

Gescannte Dateien

113

Analysierte Zeilen

Prüfelemente

Falschmeldungen ignoriert

Bestätigte Sicherheitsbedenken (1)

Mittel

SKILL.md:31-39 SKILL.md:84

Unpinned External Package Execution

Both CLI examples run npx -y socialdatax-skills@latest, allowing mutable registry code to execute without an installation prompt. That process can access SOCIALDATAX_API_KEY; compromised future releases could expose credentials or modify local files despite the documented read-only intent.

The examples explicitly select @latest and suppress installation confirmation with -y. This establishes a supply chain exposure, not evidence that the package is malicious.

Risikofaktoren

⚙️ Externe Befehle (26)

🌐 Netzwerkzugriff (3)

SKILL.md:7 SKILL.md:25 SKILL.md:95

🔑 Umgebungsvariablen (6)

SKILL.md:7 SKILL.md:25 SKILL.md:84 SKILL.md:94 SKILL.md:96 SKILL.md:102

Geprüft von: codex

Diesen Bericht teilen & zitieren

Teile den versionierten Bewertungsbericht, das neutrale Badge, die Einbettungskarte und Zitate. Skillstore berichtet Nachweise, ohne zu entscheiden, ob dieser Skill sicher ist.

Versionsbericht öffnen

Berichtslink kopieren

https://skillstore.io/skills/devinchen2014-xhs-creator-content-research/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown-Badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/devinchen2014-xhs-creator-content-research/security.svg)](https://skillstore.io/skills/devinchen2014-xhs-creator-content-research?utm_source=security_passport_badge)

HTML-Badge

<a href="https://skillstore.io/skills/devinchen2014-xhs-creator-content-research?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/devinchen2014-xhs-creator-content-research/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Einbettungskarte

<iframe src="https://skillstore.io/embed/skills/devinchen2014-xhs-creator-content-research.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Wissenschaftliche Zitate (APA · BibTeX · CFF)

APA-Zitat

devinchen2014. (2026). xhs-creator-content-research security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/devinchen2014-xhs-creator-content-research/audits/1

BibTeX-Zitat

@techreport{devinchen2014-devinchen2014-xhs-creator-content-research-2026,
  author = {devinchen2014},
  title = {xhs-creator-content-research security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/devinchen2014-xhs-creator-content-research/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "xhs-creator-content-research security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "devinchen2014"
date-released: "2026-11-02"
url: "https://skillstore.io/skills/devinchen2014-xhs-creator-content-research/audits/1"
identifiers:
  - type: other
    value: "skillstore:devinchen2014-xhs-creator-content-research:audit:1"
    description: "Skillstore immutable audit report identifier"

Skillstore-Score

Warum dieser Score Evidenzvertrauen: Mittel

Architektur

Wartbarkeit

Inhalt

Gemeinschaft

Spezifikationskonformität

Was Sie erstellen können

Review Creator Partnership Fit

Review a creator's recent post topics, formats, and available engagement signals before planning a brand partnership.

Compare Managed Accounts

Collect bounded post samples across selected accounts and compare publishing patterns with clear evidence and coverage limits.

Plan Content Experiments

Study relevant peer accounts and identify topic or format experiments without copying their posts.

Diese Prompts ausprobieren

Review One Creator

Research this Xiaohongshu profile: [profile URL]. Retrieve one page and summarize available titles, publishing times, and engagement signals. State any missing fields.

Review Recent Publishing

Research account [user ID] for the last [number] days. Collect at most [item limit] posts. Summarize topics and formats. Explain date filtering and coverage.

Compare Creator Samples

Compare [profile A] and [profile B] using at most two pages per account. Separate observed topics, formats, and engagement signals. Preserve full note identifiers.

Resume an Incomplete Comparison

Resume this partial creator comparison: [saved results and pagination state]. Keep the original query and limits. Use valid continuation tokens. Report gaps without restarting completed pages.

Bewährte Praktiken

Use a complete account ID or profile input, and set explicit page or item limits before retrieval.
Keep full note identifiers and continuation tokens unchanged; disclose partial coverage and missing data.
Review the external CLI package before execution, and keep API keys in environment configuration rather than prompts or reports.

Vermeiden

Requesting all pages without a collection budget or treating a partial response as complete account history.
Truncating continuation tokens, mixing tokens across accounts, or restarting completed pages after a partial failure.
Sharing API keys in chat or assuming a documented read-only workflow verifies an external package's behavior.

Häufig gestellte Fragen

Which account inputs are supported?

Use a Xiaohongshu account ID, profile URL, short link, or profile share text. Choose one input type per call.

What do I need for live retrieval?

Configure SOCIALDATAX_API_KEY and sufficient service balance. Use Node.js and npm for CLI access, or existing compatible MCP tools.

Does this skill change my Xiaohongshu account?

The documented workflow is read-only and excludes login, publishing, likes, comments, and account changes. The external CLI implementation was not audited here.

Can I limit research to recent posts?

The CLI documents --since-days filtering. With MCP, retrieve the needed pages and filter returned publish_time values during analysis.

How should incomplete results be handled?

Preserve collected posts and errors. Resume with a valid continuation token and remaining limits. Do not automatically restart from the first page.

What happens when my balance is insufficient?

Stop repeated retries and use the provider billing page. After funding the correct account, resume according to the existing pagination state.