Fähigkeiten xhs-hot-topic-selection

📦

xhs-hot-topic-selection

Name: xhs-hot-topic-selection
Author: devinchen2014

Inhaltsrevision r1 Mittleres Risiko ⚙️ Externe Befehle🌐 Netzwerkzugriff🔑 Umgebungsvariablen

Find Xiaohongshu Topics From Current Trends

Current trend lists alone do not show which topics fit your audience. This skill combines SocialDataX trend signals and public note samples into practical editorial choices.

Unterstützt: Claude Codex Code(CC)

📊 64 Angemessen

Maintain this Skill? Claim it 📊 64 Angemessen

Mit meinem Agent installieren

Kopieren Sie diese Anfrage in Ihren Agent. Sie enthält die maßgebliche Skill-Seite und das Manifest.

Agent-Anfrage

Review the Skillstore skill "xhs-hot-topic-selection" from https://skillstore.io/skills/devinchen2014-xhs-hot-topic-selection.md and its manifest at https://skillstore.io/api/skills/devinchen2014-xhs-hot-topic-selection/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Ihr Agent sollte weiterhin seinen Plan anzeigen und alle von der Sicherheitsrichtlinie verlangten Bestätigungen anfordern.

Agent-lesbare Ressourcen

Verwenden Sie diese Links, wenn ein KI-Agent, Crawler oder Skript sauberen Kontext benötigt, statt die vollständige Seite zu lesen.

Markdown-Detailseite GET /skills/devinchen2014-xhs-hot-topic-selection.md Signiertes manifest GET /api/skills/devinchen2014-xhs-hot-topic-selection/manifest Signiertes lockfile GET /api/skills/devinchen2014-xhs-hot-topic-selection/lockfile

Testen

„xhs-hot-topic-selection“ wird verwendet. Illustrative request: review current trends for beginner home cooks.

Erwartetes Ergebnis:

Illustrative format only; no live search was performed for this example.
Trend signal: include the returned topic, rank, and available heat indicator; mark absent fields as unavailable.
Candidate direction: beginner meal preparation, subject to relevance in the returned trend list.
Next step: search the selected trend keyword for supporting public note samples.

„xhs-hot-topic-selection“ wird verwendet. Illustrative request: compare recent public notes about compact home storage.

Erwartetes Ergebnis:

Illustrative format only; no live search was performed for this example.
Sample evidence: record returned titles, authors, engagement metrics, publication dates, source references, and note identifiers.
Candidate angle: storage choices for renters with limited space; validate this direction against the retrieved samples.
Coverage note: conclusions apply only to the returned pages; missing metrics remain unavailable.
Follow-up: refine the keyword by room type or audience if the samples are too broad.

Sicherheitsaudit

Mittleres Risiko

v1 • 2.11.2026 Versionsbericht öffnen

Of 43 static findings, 42 are false positives involving Markdown, documented authentication, ordinary service links, or readable Chinese text. One finding confirms unpinned third-party execution through npx, which exposes the API credential and local process permissions to changing package code. A separate semantic finding identifies mandatory sharing of token-bearing note URLs; no evidence found of audit manipulation or deliberate credential exfiltration.

Gescannte Dateien

128

Analysierte Zeilen

Prüfelemente

Falschmeldungen ignoriert

Bestätigte Sicherheitsbedenken (1)

Mittel

SKILL.md:77

Mandatory Disclosure of Token-Bearing Note URLs

The instruction requires retaining xsec_token in every displayed, stored, or forwarded note_url and explicitly forbids redaction. This can expose access-related link tokens to unintended recipients or logs; the file does not establish whether these tokens grant account access.

The no-redaction instruction explicitly includes forwarding and storage, establishing a disclosure path. Token privileges and lifetime are undocumented, limiting certainty about impact.

Elemente der Fähigkeitsprüfung (1)

Dies sind echte lokale Fähigkeiten, die für diese Fähigkeit erwartet werden können; daher müssen sie überprüft werden, werden jedoch nicht als bestätigtes bösartiges Verhalten gezählt.

Mittel

SKILL.md:31-40

Ruby/shell backtick execution

```bash

The fenced block instructs npx -y socialdatax-skills@latest execution, automatically fetching changing third-party code with the user's permissions and API credential. The risk is supply-chain execution, not Ruby backtick substitution.

Risikofaktoren

Geprüft von: codex

Diesen Bericht teilen & zitieren

Teile den versionierten Bewertungsbericht, das neutrale Badge, die Einbettungskarte und Zitate. Skillstore berichtet Nachweise, ohne zu entscheiden, ob dieser Skill sicher ist.

Versionsbericht öffnen

Berichtslink kopieren

https://skillstore.io/skills/devinchen2014-xhs-hot-topic-selection/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown-Badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/devinchen2014-xhs-hot-topic-selection/security.svg)](https://skillstore.io/skills/devinchen2014-xhs-hot-topic-selection?utm_source=security_passport_badge)

HTML-Badge

<a href="https://skillstore.io/skills/devinchen2014-xhs-hot-topic-selection?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/devinchen2014-xhs-hot-topic-selection/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Einbettungskarte

<iframe src="https://skillstore.io/embed/skills/devinchen2014-xhs-hot-topic-selection.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Wissenschaftliche Zitate (APA · BibTeX · CFF)

APA-Zitat

devinchen2014. (2026). xhs-hot-topic-selection security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/devinchen2014-xhs-hot-topic-selection/audits/1

BibTeX-Zitat

@techreport{devinchen2014-devinchen2014-xhs-hot-topic-selection-2026,
  author = {devinchen2014},
  title = {xhs-hot-topic-selection security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/devinchen2014-xhs-hot-topic-selection/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "xhs-hot-topic-selection security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "devinchen2014"
date-released: "2026-11-02"
url: "https://skillstore.io/skills/devinchen2014-xhs-hot-topic-selection/audits/1"
identifiers:
  - type: other
    value: "skillstore:devinchen2014-xhs-hot-topic-selection:audit:1"
    description: "Skillstore immutable audit report identifier"

Skillstore-Score

Warum dieser Score Evidenzvertrauen: Mittel

Architektur

Wartbarkeit

Inhalt

Gemeinschaft

Spezifikationskonformität

Was Sie erstellen können

Plan Creator Topics

Compare current trends with relevant note samples to choose audience-specific topics and title hooks.

Evaluate Brand Relevance

Filter trend candidates for product relevance, audience fit, and supporting public examples before selecting a campaign angle.

Prepare an Editorial Meeting

Compile a structured brief with trend signals, topic candidates, sample evidence, rejected directions, and next research steps.

Diese Prompts ausprobieren

Review Current Trends

Review the current Xiaohongshu hot-search list for [audience]. Summarize relevant signals and possible directions. Mark missing data explicitly.

Explore One Keyword

Search Xiaohongshu for [keyword]. Review up to 20 notes across two pages, sorted by likes. Suggest three audience-specific topics with supporting examples.

Compare Filtered Samples

Research [topic] for [audience] using video notes from the past week. Limit collection to two pages and 20 items. Compare hooks and weak directions.

Build a Bounded Editorial Brief

Review trends for [brand]. Select three keywords. Search each within the past seven days, capped at two pages and 20 notes. Build five topic candidates. Include evidence, rejected directions, and next steps. Label partial results and preserve cumulative limits when resuming.

Bewährte Praktiken

Specify your audience and goal, then research one to three relevant trend keywords with explicit page and item limits.
Separate returned facts from editorial suggestions, mark missing fields, and label partial results before drawing conclusions.
Approve dependency execution, isolate the API credential, and review token-bearing links before sharing outputs.

Vermeiden

Treating a small sample or the current trend list as complete platform coverage or proof of future performance.
Inventing engagement metrics, publication dates, trend rankings, or missing source fields.
Automatically restarting partial searches from page one or repeatedly retrying insufficient-balance errors.

Häufig gestellte Fragen

What must I configure before using this skill?

Configure SOCIALDATAX_API_KEY and ensure sufficient service balance. Direct CLI use requires Node.js, npm, network access, and permission to execute dependencies.

Can I use MCP instead of the CLI?

Yes, if your agent already provides xhs_get_search_hot_list and xhs_search_notes. The skill documents their argument names and pagination rules.

Does this skill publish or modify my account?

The documented workflow only reads public trend and search data. It does not log in, publish, like, comment, or modify accounts.

Does the analysis cover all Xiaohongshu posts?

No. Conclusions are limited to the current trend list and retrieved pages. Recent-day filters do not guarantee complete coverage.

What happens when an API request fails?

Ordinary API failures allow one retry. Insufficient balance stops retries. Partial results require continuation tokens and remaining page and item limits.

What should I review before sharing results?

Review note URLs for xsec_token. The source requires preserving it, so restrict sharing and storage until token sensitivity and recipient authorization are established.