Fähigkeiten xhs-trend-insights-v2

📦

xhs-trend-insights-v2

Name: xhs-trend-insights-v2
Author: devinchen2014

Inhaltsrevision r1 Mittleres Risiko ⚙️ Externe Befehle🌐 Netzwerkzugriff🔑 Umgebungsvariablen

Explore Xiaohongshu Trends and Content Ideas

Content teams need current Xiaohongshu signals without confusing limited samples with platform-wide trends. This skill guides SocialDataX queries and organizes ranked topics, relevant posts, and evidence-based content directions.

Unterstützt: Claude Codex Code(CC)

📊 63 Angemessen

Maintain this Skill? Claim it 📊 63 Angemessen

Mit meinem Agent installieren

Kopieren Sie diese Anfrage in Ihren Agent. Sie enthält die maßgebliche Skill-Seite und das Manifest.

Agent-Anfrage

Review the Skillstore skill "xhs-trend-insights-v2" from https://skillstore.io/skills/devinchen2014-xhs-trend-insights-v2.md and its manifest at https://skillstore.io/api/skills/devinchen2014-xhs-trend-insights-v2/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Ihr Agent sollte weiterhin seinen Plan anzeigen und alle von der Sicherheitsrichtlinie verlangten Bestätigungen anfordern.

Agent-lesbare Ressourcen

Verwenden Sie diese Links, wenn ein KI-Agent, Crawler oder Skript sauberen Kontext benötigt, statt die vollständige Seite zu lesen.

Markdown-Detailseite GET /skills/devinchen2014-xhs-trend-insights-v2.md Signiertes manifest GET /api/skills/devinchen2014-xhs-trend-insights-v2/manifest Signiertes lockfile GET /api/skills/devinchen2014-xhs-trend-insights-v2/lockfile

Testen

„xhs-trend-insights-v2“ wird verwendet. Illustrative supplied hot-search sample: budget lunch ranks third; no earlier ranking is available. Summarize the signal.

Erwartetes Ergebnis:

Observed signal: budget lunch ranks third in the supplied snapshot.
Interpretation: the topic is a candidate for further research, not evidence of sustained growth.
Next step: search related notes and compare visible content angles.

„xhs-trend-insights-v2“ wird verwendet. Illustrative supplied sample: 12 recent image notes about desk organization; titles mention cable storage and small desks. Suggest content directions.

Erwartetes Ergebnis:

Scope: 12 supplied image notes, not complete platform coverage.
Observed angles: cable storage and small-desk organization appear in the supplied titles.
Suggested directions: a cable-storage comparison and a small-desk layout checklist.
Boundary: title patterns do not establish audience demand or expected campaign performance.

„xhs-trend-insights-v2“ wird verwendet. A search returned partial results and a continuation token. The original limit was 20 items; 12 were collected.

Erwartetes Ergebnis:

Status: results are incomplete; retain the 12 collected items and the reported error.
Recovery: after resolving the error, continue with the returned token and unchanged query conditions.
Remaining limit: collect at most eight additional items, subject to the remaining page allowance.

Sicherheitsaudit

Mittleres Risiko

v1 • 2.11.2026 Versionsbericht öffnen

All 44 static findings are false positives involving Markdown backticks, documented service links, expected credential configuration, or readable Chinese text. Two contextual risks remain: executing an unpinned npm package and requiring token-bearing result links in shared outputs. No evidence found of malicious exfiltration or attempts to override the audit.

Gescannte Dateien

118

Analysierte Zeilen

Prüfelemente

Falschmeldungen ignoriert

Bestätigte Sicherheitsbedenken (2)

Mittel

SKILL.md:32-38 SKILL.md:89

Unpinned Remote Package Execution

The examples use npx -y socialdatax-skills@latest, automatically executing a mutable npm release in an environment containing the service API key. A compromised future release could access that key or local files; the package implementation is not included in this review.

Both commands explicitly select @latest with -y, and the runtime credential requirement is documented. This establishes mutable dependency exposure, not evidence of actual package compromise.

Mittel

SKILL.md:68

Unconditional Sharing of Token-Bearing Result Links

The instruction requires preserving xsec_token in every answer, stored output, citation, and forwarded URL, and explicitly forbids redaction. This may expose link access tokens beyond the intended audience; their authorization scope is not documented.

The mandatory inclusion of xsec_token and prohibition on redaction are explicit. Token sensitivity and account-level access are unverified, so the finding concerns uncontrolled link-token disclosure.

Risikofaktoren

Geprüft von: codex

Diesen Bericht teilen & zitieren

Teile den versionierten Bewertungsbericht, das neutrale Badge, die Einbettungskarte und Zitate. Skillstore berichtet Nachweise, ohne zu entscheiden, ob dieser Skill sicher ist.

Versionsbericht öffnen

Berichtslink kopieren

https://skillstore.io/skills/devinchen2014-xhs-trend-insights-v2/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown-Badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/devinchen2014-xhs-trend-insights-v2/security.svg)](https://skillstore.io/skills/devinchen2014-xhs-trend-insights-v2?utm_source=security_passport_badge)

HTML-Badge

<a href="https://skillstore.io/skills/devinchen2014-xhs-trend-insights-v2?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/devinchen2014-xhs-trend-insights-v2/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Einbettungskarte

<iframe src="https://skillstore.io/embed/skills/devinchen2014-xhs-trend-insights-v2.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Wissenschaftliche Zitate (APA · BibTeX · CFF)

APA-Zitat

devinchen2014. (2026). xhs-trend-insights-v2 security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/devinchen2014-xhs-trend-insights-v2/audits/1

BibTeX-Zitat

@techreport{devinchen2014-devinchen2014-xhs-trend-insights-v2-2026,
  author = {devinchen2014},
  title = {xhs-trend-insights-v2 security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/devinchen2014-xhs-trend-insights-v2/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "xhs-trend-insights-v2 security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "devinchen2014"
date-released: "2026-11-02"
url: "https://skillstore.io/skills/devinchen2014-xhs-trend-insights-v2/audits/1"
identifiers:
  - type: other
    value: "skillstore:devinchen2014-xhs-trend-insights-v2:audit:1"
    description: "Skillstore immutable audit report identifier"

Skillstore-Score

Warum dieser Score Evidenzvertrauen: Mittel

Architektur

Wartbarkeit

Inhalt

Gemeinschaft

Spezifikationskonformität

Was Sie erstellen können

Review Editorial Opportunities

Review current ranked topics and related note samples to choose focused editorial directions.

Research Brand Conversations

Search a category or brand, compare visible content angles, and document evidence separately from marketing hypotheses.

Develop Creator Topics

Filter recent notes by subject and format to develop practical video or image-post ideas.

Diese Prompts ausprobieren

Review Current Topics

Show current Xiaohongshu hot-search topics through SocialDataX. Summarize available rankings and heat signals without claiming historical growth.

Explore a Focused Keyword

Search Xiaohongshu for [keyword]. Retrieve one page and at most 20 notes. Separate observed titles and creators from suggested content angles.

Compare Recent Content Formats

Research [topic] over the last seven days. Compare image and video samples, using at most two pages per format. State coverage limits.

Build a Bounded Research Brief

Research [brand or category] over [days] days. Collect at most three pages and 50 notes. Preserve partial results and resume only with valid tokens. Separate hot-search evidence, search observations, and hypotheses. Include sample references while excluding sensitive URL tokens from public output.

Bewährte Praktiken

Start with one page and explicit item limits before expanding the research scope.
Separate rankings, search observations, and interpretations; state date windows and sampling limits.
Use an approved package version, protect API credentials, and review token-bearing links before sharing.

Vermeiden

Treating one ranked snapshot or a few search pages as complete evidence of platform-wide growth.
Restarting partial searches from the first page or ignoring original collection limits.
Publishing API keys or token-bearing links in public reports, logs, or forwarded messages.

Häufig gestellte Fragen

What information should I provide?

Provide a keyword or topic direction, or request the current hot-search list. Add a time window and collection limit when relevant.

What setup does the skill require?

Configure SOCIALDATAX_API_KEY and provider balance. Direct CLI use needs Node.js and npm; equivalent MCP tools can be used when already available.

Does it access or modify my Xiaohongshu account?

The documented workflow is read-only and does not log in, post, like, comment, or change account settings.

Does it prove that a topic is growing?

No. Current rankings and limited note samples show visible signals, not verified historical growth or complete platform coverage.

How should incomplete results or insufficient balance be handled?

Keep partial results and report the error. Stop balance-related retries, resolve the issue, and resume with a valid continuation token within original limits.

Can I share the returned links?

Review links before sharing because they may contain xsec_token. Keep original links in authorized contexts and remove sensitive tokens from public outputs.