Fähigkeiten xhs-creator-profile-insights

📦

xhs-creator-profile-insights

Name: xhs-creator-profile-insights
Author: devinchen2014

Inhaltsrevision r1 Mittleres Risiko ⚙️ Externe Befehle🌐 Netzwerkzugriff🔑 Umgebungsvariablen

Analyze Xiaohongshu Creator Profiles

Creator screening requires consistent profile facts before partnership decisions. This skill guides SocialDataX lookups and separates visible account data from strategic judgments.

Unterstützt: Claude Codex Code(CC)

📊 64 Angemessen

Maintain this Skill? Claim it 📊 64 Angemessen

Mit meinem Agent installieren

Kopieren Sie diese Anfrage in Ihren Agent. Sie enthält die maßgebliche Skill-Seite und das Manifest.

Agent-Anfrage

Review the Skillstore skill "xhs-creator-profile-insights" from https://skillstore.io/skills/devinchen2014-xhs-creator-profile-insights.md and its manifest at https://skillstore.io/api/skills/devinchen2014-xhs-creator-profile-insights/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Ihr Agent sollte weiterhin seinen Plan anzeigen und alle von der Sicherheitsrichtlinie verlangten Bestätigungen anfordern.

Agent-lesbare Ressourcen

Verwenden Sie diese Links, wenn ein KI-Agent, Crawler oder Skript sauberen Kontext benötigt, statt die vollständige Seite zu lesen.

Markdown-Detailseite GET /skills/devinchen2014-xhs-creator-profile-insights.md Signiertes manifest GET /api/skills/devinchen2014-xhs-creator-profile-insights/manifest Signiertes lockfile GET /api/skills/devinchen2014-xhs-creator-profile-insights/lockfile

Testen

„xhs-creator-profile-insights“ wird verwendet. Summarize a creator profile whose response includes a biography and follower count but no verification field.

Erwartetes Ergebnis:

Illustrative summary: The returned biography describes skincare reviews, and the account reports 18,000 followers.
Verification: Unavailable in the response.
Interpretation: The stated topic may fit a skincare campaign, but profile data alone does not establish audience relevance.
Next question: Which recent posts and engagement results should be reviewed before outreach?

„xhs-creator-profile-insights“ wird verwendet. The creator lookup returned an insufficient balance error.

Erwartetes Ergebnis:

The lookup did not return profile data because the provider balance is insufficient.
Billing page: https://socialdatax.com/dashboard/billing
No repeated request was made. Resume the failed lookup after you confirm that the account balance is available.

Sicherheitsaudit

Mittleres Risiko

v1 • 2.11.2026 Versionsbericht öffnen

All 32 static findings concern Markdown, documented authentication, service links, creator identifiers, or readable multilingual text rather than demonstrated threats. A separate supply-chain risk exists because the examples execute socialdatax-skills@latest through npx with automatic installation approval. No evidence found of credential exfiltration or prompt injection in the two files; external package behavior remains unverified.

Gescannte Dateien

102

Analysierte Zeilen

Prüfelemente

Falschmeldungen ignoriert

Bestätigte Sicherheitsbedenken (1)

Mittel

SKILL.md:31-38

Automatic Execution of an Unpinned npm Package

Both CLI examples use npx -y socialdatax-skills@latest. This executes mutable third-party code without an installation prompt, exposing users to compromised releases.

Both commands explicitly select @latest and use -y. The external package implementation is absent, so its claimed read-only behavior cannot be verified.

Risikofaktoren

⚙️ Externe Befehle (18)

SKILL.md:9 SKILL.md:24 SKILL.md:30-39 SKILL.md:39-44 SKILL.md:44-45 SKILL.md:45-48 SKILL.md:48-49 SKILL.md:49-53 SKILL.md:53 SKILL.md:65-66 SKILL.md:66-69 SKILL.md:69 SKILL.md:70-74 SKILL.md:74-83 SKILL.md:83-84 SKILL.md:84-85 SKILL.md:85-91 SKILL.md:91

🌐 Netzwerkzugriff (3)

SKILL.md:7 SKILL.md:24 SKILL.md:84

🔑 Umgebungsvariablen (6)

SKILL.md:7 SKILL.md:24 SKILL.md:74 SKILL.md:83 SKILL.md:85 SKILL.md:91

Geprüft von: codex

Diesen Bericht teilen & zitieren

Teile den versionierten Bewertungsbericht, das neutrale Badge, die Einbettungskarte und Zitate. Skillstore berichtet Nachweise, ohne zu entscheiden, ob dieser Skill sicher ist.

Versionsbericht öffnen

Berichtslink kopieren

https://skillstore.io/skills/devinchen2014-xhs-creator-profile-insights/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown-Badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/devinchen2014-xhs-creator-profile-insights/security.svg)](https://skillstore.io/skills/devinchen2014-xhs-creator-profile-insights?utm_source=security_passport_badge)

HTML-Badge

<a href="https://skillstore.io/skills/devinchen2014-xhs-creator-profile-insights?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/devinchen2014-xhs-creator-profile-insights/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Einbettungskarte

<iframe src="https://skillstore.io/embed/skills/devinchen2014-xhs-creator-profile-insights.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Wissenschaftliche Zitate (APA · BibTeX · CFF)

APA-Zitat

devinchen2014. (2026). xhs-creator-profile-insights security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/devinchen2014-xhs-creator-profile-insights/audits/1

BibTeX-Zitat

@techreport{devinchen2014-devinchen2014-xhs-creator-profile-insights-2026,
  author = {devinchen2014},
  title = {xhs-creator-profile-insights security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/devinchen2014-xhs-creator-profile-insights/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "xhs-creator-profile-insights security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "devinchen2014"
date-released: "2026-11-02"
url: "https://skillstore.io/skills/devinchen2014-xhs-creator-profile-insights/audits/1"
identifiers:
  - type: other
    value: "skillstore:devinchen2014-xhs-creator-profile-insights:audit:1"
    description: "Skillstore immutable audit report identifier"

Skillstore-Score

Warum dieser Score Evidenzvertrauen: Mittel

Architektur

Wartbarkeit

Inhalt

Gemeinschaft

Spezifikationskonformität

Was Sie erstellen können

Screen a Potential Brand Partner

Review a creator profile and distinguish visible account evidence from assumptions about brand fit.

Prepare Creator Intake Notes

Summarize an account ID or profile link into consistent facts and follow-up questions for representation discussions.

Review Account Positioning

Inspect your visible biography, verification, and follower signals before deciding which profile details need further review.

Diese Prompts ausprobieren

Summarize One Profile

Look up this Xiaohongshu profile: [profile URL]. Summarize available account facts and mark missing fields as unavailable.

Use a Known Creator ID

Retrieve the XHS profile for [user ID]. Report biography, verification, follower count, and visible engagement signals without inferring unavailable demographics.

Assess Preliminary Brand Fit

Review [profile share text] for [brand category]. Separate returned profile facts from tentative fit judgments and list evidence needed before outreach.

Compare a Creator Shortlist

Look up each creator separately: [profile links]. Compare available profile fields, distinguish facts from judgments, and flag evidence gaps for [campaign goals].

Bewährte Praktiken

Use one supported identifier per lookup and reuse known platform IDs when available.
Keep API keys in the configured environment and exclude secret values from prompts, logs, and shared reports.
Review and pin the CLI package before execution; label missing fields and separate profile facts from screening judgments.

Vermeiden

Do not infer audience authenticity, conversion rates, or campaign outcomes from follower counts alone.
Do not combine account ID and profile URL entry points in one request.
Do not repeatedly retry insufficient balance errors or authorize unrelated system changes to repair the environment.

Häufig gestellte Fragen

Which inputs are supported?

Use a Xiaohongshu account ID, profile URL, short link, or shared profile text. Select one entry point per call.

What setup is required?

Configure SOCIALDATAX_API_KEY and provider access. Direct CLI usage also requires Node.js and npm; existing MCP tools provide an alternative entry point.

Does the workflow modify my account?

The documentation specifies read-only profile queries without login or account actions. External package behavior was not verified from these files.

Are all profile fields guaranteed?

No. Available fields depend on the provider response. Missing fields should remain unavailable rather than being inferred.

Is provider access free?

The documentation describes account balance requirements and billing recovery. Check current SocialDataX pricing; this skill provides no pricing guarantee.

Can this replace a complete partnership evaluation?

No. It supports preliminary profile screening. Review content, audience evidence, engagement quality, and campaign requirements before making partnership decisions.