Habilidades maxhub-skills
📦
maxhub-skills
v3.2.0 Revisión del contenido r1 Crítico 🌐 Acceso a red🔑 Variables de entorno⚙️ Comandos externos
Consultar las APIs de plataformas sociales de MaxHub
Los equipos necesitan un único lugar para inspeccionar referencias de APIs de plataformas sociales y planificar consultas de datos. Esta skill organiza endpoints, parámetros y patrones de uso de MaxHub para flujos de trabajo con Claude, Codex y Claude Code.
Compatible con: Claude Codex Code(CC)
No instales este Skill automáticamente.
La política canónica exige la revisión de un operador antes de cualquier acción de instalación.
Instalar con mi Agente
Copia esta solicitud en tu Agente. Incluye la página canónica del Skill y el manifiesto.
Solicitud de agente
Review the Skillstore skill "maxhub-skills" from https://skillstore.io/skills/xiewxx-maxhub-skills.md and its manifest at https://skillstore.io/api/skills/xiewxx-maxhub-skills/manifest. Verify the artifact. Do not auto-install. Inspect the skill and report your findings, then wait for an operator or manual installation decision.Tu Agente debe seguir mostrando su plan y solicitar cualquier confirmación exigida por la política de seguridad.
Recursos legibles por agentes
Usa estos enlaces cuando un agente de IA, crawler o script necesite contexto limpio en vez de leer la página completa.
Pruébalo
Usando "maxhub-skills". Encuentra la forma más segura de consultar analítica de creadores de TikTok.
Resultado esperado:
La skill identificaría grupos de endpoints de analítica de creadores, enumeraría la autenticación requerida de MaxHub y advertiría contra helpers basados en cookies o de generación de firmas.
Usando "maxhub-skills". Compara las capacidades de búsqueda de WeChat y Lemon8.
Resultado esperado:
La skill resumiría los endpoints de búsqueda y contenido disponibles para cada plataforma, y luego indicaría las necesidades de parámetros, los límites de paginación y los límites de credenciales.
Usando "maxhub-skills". Revisa si debería usar un endpoint helper de firma.
Resultado esperado:
La skill marcaría los helpers de firma como de alto riesgo y recomendaría evitar flujos de trabajo de evasión anti-bot o de protección de plataformas.
Auditoría de seguridad
Críticov4 • 8/7/2026 Abrir el informe versionado
Most static command, network, blocker, and obfuscation matches are documentation false positives. I confirmed credential handling risk for MAXHUB_API_KEY and added semantic findings for TikTok security bypass helpers, metric manipulation, user-cookie forwarding, and a security pre-approval claim. The skill should not be published until those high-risk capabilities and claims are removed or isolated.
33
Archivos escaneados
13,250
Líneas analizadas
67
Elementos de revisión
0
Falsos positivos ignorados
Preocupaciones de seguridad confirmadas (4)
Crítico
maxhub-tiktok/SKILL.md:127-133maxhub-tiktok/references/api-video.md:7-35maxhub-tiktok/references/api-video.md:3916-4118
Platform Security Bypass Helpers Exposed
The TikTok routes include helpers for request signatures, encryption, fingerprints, msToken values, device registration, and guest cookies. These capabilities can support bypassing platform anti-automation controls.
The endpoint names and descriptions directly reference signatures, encryption, fingerprints, msToken generation, and device registration. This is strong semantic evidence of platform security bypass tooling.
Crítico
Metric Manipulation Endpoint Exposed
The TikTok API reference documents a function that increases a video play count and returns a success status. This is a platform manipulation capability, not a read-only data query.
The cited description says the endpoint increases a work video play count and reports success or failure. That directly supports business-logic abuse and contradicts read-only positioning.
Alto
maxhub-tiktok/SKILL.md:66-78maxhub-tiktok/references/api-user.md:96-114maxhub-tiktok/references/api-user.md:161-181
User Cookie Forwarding to Third Party
Several TikTok endpoints accept or require user cookies for account-specific data. Forwarding browser cookies to MaxHub can expose account sessions and private user data.
The documentation explicitly warns that some endpoints require platform session cookies and shows cookie parameters. Cookies can authorize account access beyond simple public data retrieval.
Alto
Prompt Injection Attempt Detected
RECOMMENDATION.md claims the skill has passed ClawHub security review. Security pre-approval claims can bias automated review and must not be treated as authoritative.
The file contains a direct security-approval claim in marketplace-facing prose. It does not issue an explicit override command, so confidence is high but not maximal.
Elementos de revisión de capacidades (67)
Estas son capacidades locales reales que pueden esperarse para esta habilidad, por lo que requieren revisión, pero no se cuentan como comportamiento malicioso confirmado.
Alto
Generic API/secret keys
2. 配置:`openclaw config set skills.entries.maxhub-lemon8.apiKey "<你的-key>"` 或 `export MAXHUB_API_KEY=
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
Alto
Generic API/secret keys
2. Configure: `openclaw config set skills.entries.maxhub-lemon8.apiKey "<your-key>"` or `export MAXH
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
Alto
Generic API/secret keys
Auth: `Authorization: Bearer $MAXHUB_API_KEY`
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
Alto
Generic API/secret keys
Auth: `Authorization: Bearer $MAXHUB_API_KEY`
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
Alto
Generic API/secret keys
primaryEnv: MAXHUB_API_KEY
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
Alto
Generic API/secret keys
- MAXHUB_API_KEY
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
Alto
Generic API/secret keys
- name: MAXHUB_API_KEY
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
Alto
Generic API/secret keys
Use the configured `MAXHUB_API_KEY` value as the `Authorization: Bearer` request header.
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
Alto
Generic API/secret keys
maxhub_auth_header="Authorization: Bearer ${MAXHUB_API_KEY}"
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
Alto
Generic API/secret keys
[ -n "${MAXHUB_API_KEY:-}" ] && echo "ok" || echo "missing"
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
Alto
Generic API/secret keys
> - OpenClaw/ClawHub:`openclaw config set skills.entries.maxhub-lemon8.apiKey "你的_API_KEY"`
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
Alto
Generic API/secret keys
> - 通用环境变量:`export MAXHUB_API_KEY="你的_API_KEY"`
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
Alto
Generic API/secret keys
> - OpenClaw/ClawHub: `openclaw config set skills.entries.maxhub-lemon8.apiKey "YOUR_API_KEY"`
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
Alto
Generic API/secret keys
> - Generic: `export MAXHUB_API_KEY="YOUR_API_KEY"`
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
Alto
Generic API/secret keys
2. 配置:`openclaw config set skills.entries.maxhub-tiktok.apiKey "<你的-key>"` 或 `export MAXHUB_API_KEY=
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
Alto
Generic API/secret keys
2. Configure: `openclaw config set skills.entries.maxhub-tiktok.apiKey "<your-key>"` or `export MAXH
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
Alto
Generic API/secret keys
Auth: `Authorization: Bearer $MAXHUB_API_KEY`
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
Alto
Generic API/secret keys
Auth: `Authorization: Bearer $MAXHUB_API_KEY`
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
Alto
Generic API/secret keys
Auth: `Authorization: Bearer $MAXHUB_API_KEY`
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
Alto
Generic API/secret keys
Auth: `Authorization: Bearer $MAXHUB_API_KEY`
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
Alto
Generic API/secret keys
primaryEnv: MAXHUB_API_KEY
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
Alto
Generic API/secret keys
- MAXHUB_API_KEY
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
Alto
Generic API/secret keys
- name: MAXHUB_API_KEY
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
Alto
Generic API/secret keys
Use the configured `MAXHUB_API_KEY` value as the `Authorization: Bearer` request header.
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
Alto
Generic API/secret keys
maxhub_auth_header="Authorization: Bearer ${MAXHUB_API_KEY}"
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
Alto
Generic API/secret keys
[ -n "${MAXHUB_API_KEY:-}" ] && echo "ok" || echo "missing"
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
Alto
Generic API/secret keys
> - OpenClaw/ClawHub:`openclaw config set skills.entries.maxhub-tiktok.apiKey "你的_API_KEY"`
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
Alto
Generic API/secret keys
> - 通用环境变量:`export MAXHUB_API_KEY="你的_API_KEY"`
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
Alto
Generic API/secret keys
> - OpenClaw/ClawHub: `openclaw config set skills.entries.maxhub-tiktok.apiKey "YOUR_API_KEY"`
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
Alto
Generic API/secret keys
> - Generic: `export MAXHUB_API_KEY="YOUR_API_KEY"`
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
Alto
Generic API/secret keys
2. 配置:`openclaw config set skills.entries.maxhub-toutiao.apiKey "<你的-key>"` 或 `export MAXHUB_API_KEY
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
Alto
Generic API/secret keys
2. Configure: `openclaw config set skills.entries.maxhub-toutiao.apiKey "<your-key>"` or `export MAX
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
Alto
Generic API/secret keys
Auth: `Authorization: Bearer $MAXHUB_API_KEY`
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
Alto
Generic API/secret keys
primaryEnv: MAXHUB_API_KEY
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
Alto
Generic API/secret keys
- MAXHUB_API_KEY
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
Alto
Generic API/secret keys
- name: MAXHUB_API_KEY
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
Alto
Generic API/secret keys
Use the configured `MAXHUB_API_KEY` value as the `Authorization: Bearer` request header.
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
Alto
Generic API/secret keys
maxhub_auth_header="Authorization: Bearer ${MAXHUB_API_KEY}"
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
Alto
Generic API/secret keys
[ -n "${MAXHUB_API_KEY:-}" ] && echo "ok" || echo "missing"
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
Alto
Generic API/secret keys
> - OpenClaw/ClawHub:`openclaw config set skills.entries.maxhub-toutiao.apiKey "你的_API_KEY"`
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
Alto
Generic API/secret keys
> - 通用环境变量:`export MAXHUB_API_KEY="你的_API_KEY"`
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
Alto
Generic API/secret keys
> - OpenClaw/ClawHub: `openclaw config set skills.entries.maxhub-toutiao.apiKey "YOUR_API_KEY"`
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
Alto
Generic API/secret keys
> - Generic: `export MAXHUB_API_KEY="YOUR_API_KEY"`
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
Alto
Generic API/secret keys
2. 配置:`openclaw config set skills.entries.maxhub-wechat.apiKey "<你的-key>"` 或 `export MAXHUB_API_KEY=
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
Alto
Generic API/secret keys
2. Configure: `openclaw config set skills.entries.maxhub-wechat.apiKey "<your-key>"` or `export MAXH
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
Alto
Generic API/secret keys
Auth: `Authorization: Bearer $MAXHUB_API_KEY`
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
Alto
Generic API/secret keys
Auth: `Authorization: Bearer $MAXHUB_API_KEY`
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
Alto
Generic API/secret keys
primaryEnv: MAXHUB_API_KEY
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
Alto
Generic API/secret keys
- MAXHUB_API_KEY
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
Alto
Generic API/secret keys
- name: MAXHUB_API_KEY
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
Alto
Generic API/secret keys
Use the configured `MAXHUB_API_KEY` value as the `Authorization: Bearer` request header.
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
Alto
Generic API/secret keys
maxhub_auth_header="Authorization: Bearer ${MAXHUB_API_KEY}"
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
Alto
Generic API/secret keys
[ -n "${MAXHUB_API_KEY:-}" ] && echo "ok" || echo "missing"
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
Alto
Generic API/secret keys
> - OpenClaw/ClawHub:`openclaw config set skills.entries.maxhub-wechat.apiKey "你的_API_KEY"`
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
Alto
Generic API/secret keys
> - 通用环境变量:`export MAXHUB_API_KEY="你的_API_KEY"`
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
Alto
Generic API/secret keys
> - OpenClaw/ClawHub: `openclaw config set skills.entries.maxhub-wechat.apiKey "YOUR_API_KEY"`
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
Alto
Generic API/secret keys
> - Generic: `export MAXHUB_API_KEY="YOUR_API_KEY"`
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
Alto
Generic API/secret keys
export MAXHUB_API_KEY=mh_sk_your_api_key_here
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
Alto
Generic API/secret keys
export MAXHUB_API_KEY=mh_sk_your_api_key_here
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
Alto
Generic API/secret keys
export MAXHUB_API_KEY=mh_sk_your_api_key_here
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
Alto
Generic API/secret keys
primaryEnv: MAXHUB_API_KEY
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
Alto
Generic API/secret keys
- MAXHUB_API_KEY
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
Alto
Generic API/secret keys
- name: MAXHUB_API_KEY
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
Alto
Generic API/secret keys
所有技能统一通过 `MAXHUB_API_KEY` 认证,Base URL 为 `https://www.aconfig.cn`。
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
Alto
Generic API/secret keys
MAXHUB_API_KEY="your_api_key_here"
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
Alto
Generic API/secret keys
maxhub_auth_header="Authorization: Bearer ${MAXHUB_API_KEY}"
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
Alto
Generic API/secret keys
- **frontmatter.metadata.openclaw.primaryEnv**:统一为 `MAXHUB_API_KEY`
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
Factores de riesgo
🌐 Acceso a red (106)
maxhub-lemon8/_meta.json:6 maxhub-lemon8/_meta.json:7 maxhub-lemon8/SKILL.md:18 maxhub-lemon8/SKILL.md:22 maxhub-lemon8/SKILL.md:30 maxhub-lemon8/SKILL.md:32 maxhub-lemon8/SKILL.md:45 maxhub-lemon8/SKILL.md:53 maxhub-lemon8/SKILL.md:57 maxhub-lemon8/SKILL.md:77 maxhub-lemon8/SKILL.md:88 maxhub-tiktok/_meta.json:6 maxhub-tiktok/_meta.json:7 maxhub-tiktok/references/api-ads-analytics.md:660 maxhub-tiktok/references/api-ads-analytics.md:662 maxhub-tiktok/references/api-ads-analytics.md:663 maxhub-tiktok/references/api-ads-analytics.md:664 maxhub-tiktok/references/api-ads-analytics.md:665 maxhub-tiktok/references/api-search.md:564 maxhub-tiktok/references/api-search.md:574 maxhub-tiktok/references/api-search.md:666 maxhub-tiktok/references/api-search.md:670 maxhub-tiktok/references/api-search.md:671 maxhub-tiktok/references/api-search.md:675 maxhub-tiktok/references/api-search.md:676 maxhub-tiktok/references/api-user.md:57 maxhub-tiktok/references/api-user.md:479 maxhub-tiktok/references/api-user.md:482 maxhub-tiktok/references/api-user.md:483 maxhub-tiktok/references/api-user.md:487 maxhub-tiktok/references/api-user.md:488 maxhub-tiktok/references/api-user.md:495 maxhub-tiktok/references/api-user.md:496 maxhub-tiktok/references/api-video.md:4305 maxhub-tiktok/references/api-video.md:4326 maxhub-tiktok/references/api-video.md:4328 maxhub-tiktok/references/api-video.md:4517 maxhub-tiktok/references/api-video.md:4521 maxhub-tiktok/references/api-video.md:4522 maxhub-tiktok/references/api-video.md:4526 maxhub-tiktok/references/api-video.md:4527 maxhub-tiktok/references/api-video.md:4665 maxhub-tiktok/references/api-video.md:4669 maxhub-tiktok/references/api-video.md:4970 maxhub-tiktok/references/api-video.md:4974 maxhub-tiktok/references/api-video.md:4980 maxhub-tiktok/references/api-video.md:4984 maxhub-tiktok/references/api-video.md:5319 maxhub-tiktok/references/api-video.md:5321 maxhub-tiktok/references/api-video.md:5322 maxhub-tiktok/references/api-video.md:5323 maxhub-tiktok/references/api-video.md:5324 maxhub-tiktok/references/api-video.md:5431 maxhub-tiktok/references/api-video.md:5437 maxhub-tiktok/references/api-video.md:5541 maxhub-tiktok/references/api-video.md:5542 maxhub-tiktok/references/api-video.md:5658 maxhub-tiktok/references/api-video.md:5662 maxhub-tiktok/references/api-video.md:5663 maxhub-tiktok/references/api-video.md:5672 maxhub-tiktok/references/api-video.md:5740 maxhub-tiktok/references/api-video.md:5742 maxhub-tiktok/references/api-video.md:5747 maxhub-tiktok/references/api-video.md:5749 maxhub-tiktok/SKILL.md:18 maxhub-tiktok/SKILL.md:22 maxhub-tiktok/SKILL.md:30 maxhub-tiktok/SKILL.md:32 maxhub-tiktok/SKILL.md:45 maxhub-tiktok/SKILL.md:53 maxhub-tiktok/SKILL.md:57 maxhub-tiktok/SKILL.md:75 maxhub-tiktok/SKILL.md:77 maxhub-tiktok/SKILL.md:98 maxhub-tiktok/SKILL.md:109 maxhub-toutiao/_meta.json:6 maxhub-toutiao/_meta.json:7 maxhub-toutiao/SKILL.md:18 maxhub-toutiao/SKILL.md:22 maxhub-toutiao/SKILL.md:30 maxhub-toutiao/SKILL.md:32 maxhub-toutiao/SKILL.md:45 maxhub-toutiao/SKILL.md:53 maxhub-toutiao/SKILL.md:57 maxhub-toutiao/SKILL.md:77 maxhub-toutiao/SKILL.md:88 maxhub-wechat/_meta.json:6 maxhub-wechat/_meta.json:7 maxhub-wechat/SKILL.md:18 maxhub-wechat/SKILL.md:22 maxhub-wechat/SKILL.md:30 maxhub-wechat/SKILL.md:32 maxhub-wechat/SKILL.md:45 maxhub-wechat/SKILL.md:53 maxhub-wechat/SKILL.md:57 maxhub-wechat/SKILL.md:77 maxhub-wechat/SKILL.md:88 README.md:47 README.md:196 RECOMMENDATION.md:151 SKILL.md:18 SKILL.md:22 SKILL.md:30 SKILL.md:34 SKILL.md:149 SKILL.md:153
🔑 Variables de entorno (67)
maxhub-lemon8/README_CN.md:22 maxhub-lemon8/README.md:22 maxhub-lemon8/references/api-post-user.md:4 maxhub-lemon8/references/api-search-discover.md:4 maxhub-lemon8/SKILL.md:10 maxhub-lemon8/SKILL.md:13 maxhub-lemon8/SKILL.md:17 maxhub-lemon8/SKILL.md:47 maxhub-lemon8/SKILL.md:50 maxhub-lemon8/SKILL.md:68 maxhub-lemon8/SKILL.md:80 maxhub-lemon8/SKILL.md:81 maxhub-lemon8/SKILL.md:91 maxhub-lemon8/SKILL.md:92 maxhub-tiktok/README_CN.md:26 maxhub-tiktok/README.md:26 maxhub-tiktok/references/api-ads-analytics.md:4 maxhub-tiktok/references/api-search.md:4 maxhub-tiktok/references/api-user.md:4 maxhub-tiktok/references/api-video.md:4 maxhub-tiktok/SKILL.md:10 maxhub-tiktok/SKILL.md:13 maxhub-tiktok/SKILL.md:17 maxhub-tiktok/SKILL.md:47 maxhub-tiktok/SKILL.md:50 maxhub-tiktok/SKILL.md:89 maxhub-tiktok/SKILL.md:101 maxhub-tiktok/SKILL.md:102 maxhub-tiktok/SKILL.md:112 maxhub-tiktok/SKILL.md:113 maxhub-toutiao/README_CN.md:20 maxhub-toutiao/README.md:20 maxhub-toutiao/references/api-content-user.md:4 maxhub-toutiao/SKILL.md:10 maxhub-toutiao/SKILL.md:13 maxhub-toutiao/SKILL.md:17 maxhub-toutiao/SKILL.md:47 maxhub-toutiao/SKILL.md:50 maxhub-toutiao/SKILL.md:68 maxhub-toutiao/SKILL.md:80 maxhub-toutiao/SKILL.md:81 maxhub-toutiao/SKILL.md:91 maxhub-toutiao/SKILL.md:92 maxhub-wechat/README_CN.md:21 maxhub-wechat/README.md:21 maxhub-wechat/references/api-channels.md:4 maxhub-wechat/references/api-mp.md:4 maxhub-wechat/SKILL.md:10 maxhub-wechat/SKILL.md:13 maxhub-wechat/SKILL.md:17 maxhub-wechat/SKILL.md:47 maxhub-wechat/SKILL.md:50 maxhub-wechat/SKILL.md:68 maxhub-wechat/SKILL.md:80 maxhub-wechat/SKILL.md:81 maxhub-wechat/SKILL.md:91 maxhub-wechat/SKILL.md:92 README.md:46 README.md:195 RECOMMENDATION.md:150 SKILL.md:10 SKILL.md:13 SKILL.md:17 SKILL.md:34 SKILL.md:146 SKILL.md:147 SKILL.md:199
⚙️ Comandos externos (107)
maxhub-lemon8/SKILL.md:45 maxhub-lemon8/SKILL.md:47 maxhub-lemon8/SKILL.md:49-61 maxhub-lemon8/SKILL.md:61-67 maxhub-lemon8/SKILL.md:67-69 maxhub-lemon8/SKILL.md:69-80 maxhub-lemon8/SKILL.md:80-81 maxhub-lemon8/SKILL.md:81-91 maxhub-lemon8/SKILL.md:91-92 maxhub-lemon8/SKILL.md:92-106 maxhub-lemon8/SKILL.md:106-107 maxhub-lemon8/SKILL.md:107-108 maxhub-lemon8/SKILL.md:108-160 maxhub-tiktok/SKILL.md:45 maxhub-tiktok/SKILL.md:47 maxhub-tiktok/SKILL.md:49-61 maxhub-tiktok/SKILL.md:61-75 maxhub-tiktok/SKILL.md:75-77 maxhub-tiktok/SKILL.md:77-88 maxhub-tiktok/SKILL.md:88-90 maxhub-tiktok/SKILL.md:90-101 maxhub-tiktok/SKILL.md:101-102 maxhub-tiktok/SKILL.md:102-112 maxhub-tiktok/SKILL.md:112-113 maxhub-tiktok/SKILL.md:113-127 maxhub-tiktok/SKILL.md:127-128 maxhub-tiktok/SKILL.md:128-129 maxhub-tiktok/SKILL.md:129-130 maxhub-tiktok/SKILL.md:130-131 maxhub-tiktok/SKILL.md:131-132 maxhub-tiktok/SKILL.md:132-133 maxhub-tiktok/SKILL.md:133-192 maxhub-toutiao/SKILL.md:45 maxhub-toutiao/SKILL.md:47 maxhub-toutiao/SKILL.md:49-61 maxhub-toutiao/SKILL.md:61-67 maxhub-toutiao/SKILL.md:67-69 maxhub-toutiao/SKILL.md:69-80 maxhub-toutiao/SKILL.md:80-81 maxhub-toutiao/SKILL.md:81-91 maxhub-toutiao/SKILL.md:91-92 maxhub-toutiao/SKILL.md:92-106 maxhub-toutiao/SKILL.md:106-154 maxhub-wechat/SKILL.md:45 maxhub-wechat/SKILL.md:47 maxhub-wechat/SKILL.md:49-61 maxhub-wechat/SKILL.md:61-67 maxhub-wechat/SKILL.md:67-69 maxhub-wechat/SKILL.md:69-80 maxhub-wechat/SKILL.md:80-81 maxhub-wechat/SKILL.md:81-91 maxhub-wechat/SKILL.md:91-92 maxhub-wechat/SKILL.md:92-106 maxhub-wechat/SKILL.md:106-107 maxhub-wechat/SKILL.md:107-165 SKILL.md:34 SKILL.md:67 SKILL.md:68 SKILL.md:69 SKILL.md:70 SKILL.md:71 SKILL.md:72 SKILL.md:73 SKILL.md:79 SKILL.md:80 SKILL.md:81 SKILL.md:82 SKILL.md:83 SKILL.md:84 SKILL.md:85 SKILL.md:86 SKILL.md:87 SKILL.md:88 SKILL.md:94 SKILL.md:95 SKILL.md:96 SKILL.md:100-139 SKILL.md:139-145 SKILL.md:145-151 SKILL.md:151-161 SKILL.md:161-162 SKILL.md:162-163 SKILL.md:163-164 SKILL.md:164-165 SKILL.md:165-166 SKILL.md:166-167 SKILL.md:167-173 SKILL.md:173-174 SKILL.md:174-175 SKILL.md:175-176 SKILL.md:176-177 SKILL.md:177-178 SKILL.md:178-179 SKILL.md:179-180 SKILL.md:180-181 SKILL.md:181-182 SKILL.md:182-183 SKILL.md:183-189 SKILL.md:189-190 SKILL.md:190-191 SKILL.md:191-192 SKILL.md:192 SKILL.md:193-197 SKILL.md:197-199 SKILL.md:199-201 SKILL.md:201-205 SKILL.md:205-211
Auditado por: codex Ver historial de auditorías →
Compartir y citar este informe
Comparte el informe de evaluación versionado, la insignia neutral, la tarjeta insertable y las citas. Skillstore presenta evidencias sin decidir si este Skill es seguro.
Copiar enlace del informe
https://skillstore.io/skills/xiewxx-maxhub-skills/audits/4?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportInsignia Markdown
[](https://skillstore.io/skills/xiewxx-maxhub-skills?utm_source=security_passport_badge)Insignia HTML
<a href="https://skillstore.io/skills/xiewxx-maxhub-skills?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/xiewxx-maxhub-skills/security.svg" alt="Skillstore security assessment" loading="lazy"></a>Tarjeta para insertar
<iframe src="https://skillstore.io/embed/skills/xiewxx-maxhub-skills.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>Citas académicas (APA · BibTeX · CFF)
Cita APA
XieWxx. (2026). maxhub-skills security audit report (audit version 4) [Author version 3.2.0]. Skillstore. https://skillstore.io/skills/xiewxx-maxhub-skills/audits/4Cita BibTeX
@techreport{xiewxx-xiewxx-maxhub-skills-2026,
author = {XieWxx},
title = {maxhub-skills security audit report (audit version 4)},
institution = {Skillstore},
year = {2026},
number = {4},
url = {https://skillstore.io/skills/xiewxx-maxhub-skills/audits/4},
note = {Author version 3.2.0}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "maxhub-skills security audit report (audit version 4)"
version: "3.2.0"
type: report
authors:
- name: "XieWxx"
date-released: "2026-07-08"
url: "https://skillstore.io/skills/xiewxx-maxhub-skills/audits/4"
identifiers:
- type: other
value: "skillstore:xiewxx-maxhub-skills:audit:4"
description: "Skillstore immutable audit report identifier"
Puntuación de Skillstore
Por qué esta puntuación Confianza de la evidencia: Medio 55
Arquitectura
100
Mantenibilidad
87
Contenido
68
Comunidad
100
Cumplimiento de la especificación
Lo que puedes crear
Comparar datos de tendencias de plataformas
Identificar qué grupos de endpoints pueden recuperar contenido en tendencia en TikTok, Lemon8, Toutiao o WeChat antes de crear un informe.
Preparar consultas de analítica de contenido
Identificar los endpoints de videos, usuarios, búsqueda y comentarios necesarios para una revisión planificada del rendimiento del contenido.
Revisar la cobertura de la API antes de la integración
Inspeccionar los endpoints compatibles, los parámetros requeridos y las reglas de autenticación antes de implementar llamadas a MaxHub API.
Prueba estos prompts
Encontrar un endpoint básico
Usa maxhub-skills para encontrar qué grupo de endpoints de MaxHub puede buscar videos de TikTok por una palabra clave. Explica la configuración necesaria de la clave de API y los parámetros principales.
Planificar una consulta de investigación de usuarios
Usa maxhub-skills para planificar un flujo de trabajo de investigación de usuarios de Lemon8. Incluye las categorías de endpoints, los identificadores requeridos y los límites seguros para la paginación.
Comparar opciones de plataformas
Usa maxhub-skills para comparar las opciones disponibles de consulta de datos de TikTok, Toutiao y WeChat para rastrear tendencias de contenido público.
Auditar un plan de integración
Usa maxhub-skills para revisar mi integración planificada de MaxHub en cuanto a gestión de credenciales, selección de endpoints, límites de tasa y capacidades de alto riesgo que se deben evitar.
Mejores prácticas
- Usa credenciales de prueba con alcance limitado y rótalas después de la evaluación.
- Prefiere endpoints de datos públicos de solo lectura y evita flujos de trabajo basados en cookies.
- Revisa el propósito del endpoint antes de la ejecución, especialmente para herramientas de TikTok y acciones de interacción.
Evitar
- No uses la skill para generar firmas anti-bot de plataformas ni para eludir protecciones.
- No envíes cookies completas del navegador salvo que exista un acuerdo formal de tratamiento de datos.
- No automatices likes, follows, comentarios, mensajes privados ni manipulación de métricas.
Preguntas frecuentes
¿Esta skill llama directamente a MaxHub API?
Documenta cómo llamar a las APIs de MaxHub e incluye ejemplos de curl. El comportamiento en tiempo de ejecución depende de la herramienta anfitriona y de los permisos del usuario.
¿Se requiere una clave de API?
Sí. La documentación requiere MAXHUB_API_KEY y la envía como bearer token al servicio de MaxHub.
¿Puede consultar varias plataformas?
Sí. Este fragmento incluye skills de TikTok, Lemon8, Toutiao y WeChat, mientras que la documentación raíz hace referencia a una colección más amplia de MaxHub.
¿Es seguro publicarla ahora?
No. La auditoría encontró guías de alto riesgo sobre evasión, manipulación, credenciales y descifrado de medios protegidos.
¿Por qué se reportaron hallazgos de comandos?
La mayoría de los hallazgos de comandos son ejemplos en Markdown para curl, variables de entorno o instalación. Siguen siendo sensibles cuando los usuarios los ejecutan con credenciales reales.
¿Qué debería eliminarse antes de la publicación?
Elimina helpers de firmas anti-bot, endpoints de manipulación de métricas, automatización de interacciones, helpers de mensajes privados y guías de descifrado de medios protegidos.
Detalles del desarrollador
Autor
XieWxxLicencia
MIT-0
Versión del autor
v3.2.0
Revisión de Skillstore
r1
Ref.
64ca8af0f54a325752f08bd54e52151061ea659a
Actualidad del mantenimiento
21/7/2026
Uso
3 descargas · 73 vistas