Habilidades xhs-creator-collaboration-evaluation

📦

xhs-creator-collaboration-evaluation

Name: xhs-creator-collaboration-evaluation
Author: devinchen2014

Revisión del contenido r2 Seguro ⚙️ Comandos externos🌐 Acceso a red🔑 Variables de entorno

Evaluate Xiaohongshu Creator Partnerships

Creator quotes and audience metrics can be difficult to compare against a campaign budget. This skill guides evidence-based candidate comparisons using SocialDataX commercial data.

Compatible con: Claude Codex Code(CC)

🥉 77 Bronce

Maintain this Skill? Claim it 🥉 77 Bronce

Instalar con mi Agente

Copia esta solicitud en tu Agente. Incluye la página canónica del Skill y el manifiesto.

Solicitud de agente

Review the Skillstore skill "xhs-creator-collaboration-evaluation" from https://skillstore.io/skills/devinchen2014-xhs-creator-collaboration-evaluation.md and its manifest at https://skillstore.io/api/skills/devinchen2014-xhs-creator-collaboration-evaluation/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Tu Agente debe seguir mostrando su plan y solicitar cualquier confirmación exigida por la política de seguridad.

Recursos legibles por agentes

Usa estos enlaces cuando un agente de IA, crawler o script necesite contexto limpio en vez de leer la página completa.

Detalle Markdown GET /skills/devinchen2014-xhs-creator-collaboration-evaluation.md Manifest firmado GET /api/skills/devinchen2014-xhs-creator-collaboration-evaluation/manifest Lockfile firmado GET /api/skills/devinchen2014-xhs-creator-collaboration-evaluation/lockfile

Pruébalo

Usando "xhs-creator-collaboration-evaluation". Plan queries for three supplied candidates using quotes, audience profiles, and content performance.

Resultado esperado:

Planned scope: three commercial endpoints per candidate, for nine successful queries.
Estimated charge: 180 credits if every query succeeds, based on the documented rate of 20 credits per successful commercial query.
Profile URL resolution, if needed, has a separate command fee.
Awaiting approval before querying; no candidate data has been retrieved.

Usando "xhs-creator-collaboration-evaluation". Illustrative supplied results: Candidate A has a zero quote and incomplete audience data; Candidate B has unavailable commercial data.

Resultado esperado:

Candidate A: needs more information. A zero quote does not establish free collaboration, and incomplete audience data prevents a supported fit conclusion.
Candidate B: commercial data unavailable. Preserve existing results and do not retry with alternate identifiers.
Budget fit remains unconfirmed. No sales forecast or actual ROI calculation is supported by these results.

Auditoría de seguridad

Seguro

v2 • 29/10/2026 Abrir el informe versionado

Of 40 static findings, 38 are false positives involving Markdown, Chinese text, official links, credential configuration, or creator identifiers. Two command examples execute an unpinned npm package with automatic installation, creating dependency risk in an environment containing the API key. No evidence found of prompt injection, credential exfiltration, or concealed payloads in the two reviewed files; external package implementation was not reviewed.

Archivos escaneados

141

Líneas analizadas

Elementos de revisión

Falsos positivos ignorados

Elementos de revisión de capacidades (2)

Estas son capacidades locales reales que pueden esperarse para esta habilidad, por lo que requieren revisión, pero no se cuentan como comportamiento malicioso confirmado.

Medio

SKILL.md:31-43

Ruby/shell backtick execution

```bash

The fence itself is Markdown, but its commands run npx -y socialdatax-skills@latest. This automatically executes mutable registry code with access to the configured API key.

Medio

SKILL.md:47-64

Ruby/shell backtick execution

```bash

The documented commands use npx -y socialdatax-skills@latest for additional queries. Automatic execution of an unpinned dependency exposes local credentials if a published version is compromised.

Factores de riesgo

⚙️ Comandos externos (22)

🌐 Acceso a red (3)

SKILL.md:7 SKILL.md:25 SKILL.md:123

🔑 Variables de entorno (6)

SKILL.md:7 SKILL.md:25 SKILL.md:113 SKILL.md:122 SKILL.md:124 SKILL.md:130

Auditado por: codex Ver historial de auditorías →

Compartir y citar este informe

Comparte el informe de evaluación versionado, la insignia neutral, la tarjeta insertable y las citas. Skillstore presenta evidencias sin decidir si este Skill es seguro.

Abrir el informe versionado

Copiar enlace del informe

https://skillstore.io/skills/devinchen2014-xhs-creator-collaboration-evaluation/audits/2?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Insignia Markdown

[![Skillstore security assessment](https://skillstore.io/badges/skills/devinchen2014-xhs-creator-collaboration-evaluation/security.svg)](https://skillstore.io/skills/devinchen2014-xhs-creator-collaboration-evaluation?utm_source=security_passport_badge)

Insignia HTML

<a href="https://skillstore.io/skills/devinchen2014-xhs-creator-collaboration-evaluation?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/devinchen2014-xhs-creator-collaboration-evaluation/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Tarjeta para insertar

<iframe src="https://skillstore.io/embed/skills/devinchen2014-xhs-creator-collaboration-evaluation.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Citas académicas (APA · BibTeX · CFF)

Cita APA

devinchen2014. (2026). xhs-creator-collaboration-evaluation security audit report (audit version 2) [Author version unspecified]. Skillstore. https://skillstore.io/skills/devinchen2014-xhs-creator-collaboration-evaluation/audits/2

Cita BibTeX

@techreport{devinchen2014-devinchen2014-xhs-creator-collaboration-evaluation-2026,
  author = {devinchen2014},
  title = {xhs-creator-collaboration-evaluation security audit report (audit version 2)},
  institution = {Skillstore},
  year = {2026},
  number = {2},
  url = {https://skillstore.io/skills/devinchen2014-xhs-creator-collaboration-evaluation/audits/2},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "xhs-creator-collaboration-evaluation security audit report (audit version 2)"
version: "unspecified"
type: report
authors:
  - name: "devinchen2014"
date-released: "2026-10-29"
url: "https://skillstore.io/skills/devinchen2014-xhs-creator-collaboration-evaluation/audits/2"
identifiers:
  - type: other
    value: "skillstore:devinchen2014-xhs-creator-collaboration-evaluation:audit:2"
    description: "Skillstore immutable audit report identifier"

Puntuación de Skillstore

Por qué esta puntuación Confianza de la evidencia: Medio

Arquitectura

Mantenibilidad

Contenido

Comunidad

Cumplimiento de la especificación

Lo que puedes crear

Screen Candidates Against a Brand Budget

Compare supplied creator quotes with a product campaign budget before requesting additional commercial data.

Prepare an Evidence-Based Client Shortlist

Compare audience fit and cooperation-note performance for client-approved candidates while recording missing information.

Review Partnership Research Quality

Check data windows, missing metrics, quote assumptions, and supporting links before stakeholders approve creator outreach.

Prueba estos prompts

Start a Candidate Review

Evaluate [candidate IDs or profiles] for [product] targeting [audience] with a budget of [amount and currency]. Ask for essential missing information before querying.

Run a Quote-Only Budget Screen

Screen [candidate IDs] against [budget and currency] using quote data only. State expected credits and obtain approval before querying. Flag missing and zero quotes.

Compare Audience and Content Fit

Compare [candidate IDs] for [product and target audience] within [budget]. Propose quote, audience, and cooperation-performance queries with estimated credits before execution.

Audit a Partially Completed Evaluation

Review [existing results] for [campaign requirements]. Check data windows, note scopes, evidence links, and missing fields. Separate facts from recommendations. Propose only necessary additional queries for approval.

Mejores prácticas

Confirm candidate identifiers, selected endpoints, and expected query credits before requesting commercial data.
Compare matching note scopes and returned time windows, and label missing data explicitly.
Review and pin the CLI package before execution, and keep the provider API key out of reports and shared outputs.

Evitar

Query every commercial endpoint or expand the candidate list without a clear need and approved scope.
Treat zero quotes as free offers, fill missing metrics with zeros, or combine medians.
Present estimated costs as actual ROI or promise sales from creator performance metrics.

Preguntas frecuentes

Which assistants can use this skill?

The package lists Claude, Codex, and Claude Code. Live queries also require authorized access to the documented CLI or corresponding MCP tools.

What information should I provide?

Provide the brand or product, target audience, campaign budget, and candidate creator IDs or profile URLs.

How much do commercial queries cost?

The skill documents 20 credits per successful commercial endpoint query, with no charge for failures. Profile URL resolution has separate command pricing.

Can I select any performance date range?

No. Performance and trend queries use service-defined windows. Comparisons should retain the returned dates and matching note scopes.

Can the skill predict ROI or arrange a partnership?

No. It compares available evidence and budget fit. It does not predict sales, calculate actual ROI, contact creators, or sign agreements.

What should I check before running the CLI?

Review and pin the npm package rather than automatically executing latest. Configure SOCIALDATAX_API_KEY securely and approve query costs before requesting data.