スキル xhs-comment-insights

📦

xhs-comment-insights

Name: xhs-comment-insights
Author: devinchen2014

コンテンツリビジョン r1 中リスク ⚙️ 外部コマンド🌐 ネットワークアクセス🔑 環境変数

Analyze Xiaohongshu Comments for Customer Insights

Comment threads make customer needs and purchase concerns difficult to organize. This skill guides SocialDataX retrieval and turns returned comments into evidence-based themes and actions.

対応: Claude Codex Code(CC)

📊 64 十分

Maintain this Skill? Claim it 📊 64 十分

自分のエージェントでインストール

このリクエストをエージェントにコピーしてください。正規の Skill ページとマニフェストが含まれています。

エージェントリクエスト

Review the Skillstore skill "xhs-comment-insights" from https://skillstore.io/skills/devinchen2014-xhs-comment-insights.md and its manifest at https://skillstore.io/api/skills/devinchen2014-xhs-comment-insights/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

エージェントは引き続き計画を提示し、セキュリティポリシーで必要な確認を求める必要があります。

エージェントが読めるリソース

AI エージェント、クローラー、スクリプトがページ全体ではなく整理されたコンテキストを必要とする場合は、これらのリンクを使ってください。

Markdown詳細 GET /skills/devinchen2014-xhs-comment-insights.md 署名済み manifest GET /api/skills/devinchen2014-xhs-comment-insights/manifest 署名済み lockfile GET /api/skills/devinchen2014-xhs-comment-insights/lockfile

テストする

「xhs-comment-insights」を使用しています。 Illustrative sample: three returned comments ask about sizing and two ask about returns. Summarize concerns.

期待される結果:

Scope: five supplied comments, not platform-wide coverage.
Themes: sizing uncertainty and return conditions.
Unmet need: clearer fit guidance.
Action: verify sizing and return policies before drafting an FAQ.

「xhs-comment-insights」を使用しています。 Illustrative sample: one parent comment asks about durability, and a reply reports wear after one month. Suggest a research action.

期待される結果:

Evidence: the supplied thread contains one durability question and one wear report.
Interpretation: durability needs investigation; prevalence is unknown.
Action: collect more examples and verify usage conditions before proposing a product change.

「xhs-comment-insights」を使用しています。 A two-page retrieval stopped after one page and returned a continuation token. Describe the result.

期待される結果:

Status: partial results only.
Coverage: one page collected; one requested page remains.
Recovery: retain collected comments and resume with the returned token after resolving the error.
Boundary: incomplete coverage must remain visible in the final analysis.

セキュリティ監査

中リスク

v1 • 2026/11/2 バージョン別レポートを開く

All 46 static findings are false positives involving Markdown syntax, documented authentication, provider links, content identifiers, or readable Chinese prose. No evidence found of embedded secrets, malicious obfuscation, system reconnaissance, or prompt injection in the supplied files. A separate supply-chain risk remains because the documented commands automatically execute an unpinned external package with access to the runtime environment.

スキャンされたファイル

122

解析済み行数

レビュー項目

誤検知を無視

確認済みのセキュリティ上の懸念 (1)

中

SKILL.md:32-43

Automatic Execution of an Unpinned External Package

Examples run npx -y socialdatax-skills@latest, automatically selecting and executing a mutable package release. A compromised release could access the provider credential and other process-accessible data.

All three examples use @latest and -y without a version pin. The supply-chain exposure is explicit; no evidence found of an actual compromised release.

リスク要因

⚙️ 外部コマンド (29)

🌐 ネットワークアクセス (3)

SKILL.md:7 SKILL.md:25 SKILL.md:104

🔑 環境変数 (6)

SKILL.md:7 SKILL.md:25 SKILL.md:92 SKILL.md:103 SKILL.md:105 SKILL.md:111

監査者: codex

このレポートを共有・引用

バージョン付き評価レポート、中立的なバッジ、埋め込みカード、引用を共有できます。Skillstore は証拠を報告しますが、この Skill が安全かどうかは判断しません。

バージョン別レポートを開く

レポートリンクをコピー

https://skillstore.io/skills/devinchen2014-xhs-comment-insights/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdownバッジ

[![Skillstore security assessment](https://skillstore.io/badges/skills/devinchen2014-xhs-comment-insights/security.svg)](https://skillstore.io/skills/devinchen2014-xhs-comment-insights?utm_source=security_passport_badge)

HTMLバッジ

<a href="https://skillstore.io/skills/devinchen2014-xhs-comment-insights?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/devinchen2014-xhs-comment-insights/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

埋め込みカード

<iframe src="https://skillstore.io/embed/skills/devinchen2014-xhs-comment-insights.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

学術引用 (APA · BibTeX · CFF)

APA形式の引用

devinchen2014. (2026). xhs-comment-insights security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/devinchen2014-xhs-comment-insights/audits/1

BibTeX形式の引用

@techreport{devinchen2014-devinchen2014-xhs-comment-insights-2026,
  author = {devinchen2014},
  title = {xhs-comment-insights security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/devinchen2014-xhs-comment-insights/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "xhs-comment-insights security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "devinchen2014"
date-released: "2026-11-02"
url: "https://skillstore.io/skills/devinchen2014-xhs-comment-insights/audits/1"
identifiers:
  - type: other
    value: "skillstore:devinchen2014-xhs-comment-insights:audit:1"
    description: "Skillstore immutable audit report identifier"

Skillstore スコア

このスコアの理由証拠の信頼度: 中

アーキテクチャ

保守性

コンテンツ

コミュニティ

仕様準拠

作成できるもの

Plan Follow-Up Content

Group audience questions from a selected note into topics and follow-up content ideas, supported by visible comment evidence.

Identify Product Research Questions

Extract pain points, unmet needs, and purchase concerns from returned comments to guide further product research.

Prepare Customer Support FAQs

Turn recurring questions and reply context into an FAQ draft, separating confirmed information from questions requiring verification.

これらのプロンプトを試す

Summarize One Note

Analyze the first page of comments for [note URL]. Summarize themes and purchase concerns. State sample coverage and quote only returned text.

Build an Evidence-Based FAQ

Use comments from [complete note ID] to draft customer FAQs. Separate comment evidence from interpretation. Mark unanswered product questions for verification.

Investigate a Reply Thread

Retrieve replies for [complete note ID] and [parent comment ID]. Identify concerns and disagreements. Distinguish reply previews from complete threads and disclose missing results.

Run a Bounded Research Review

Analyze [note URL] for [research question], using at most [page limit] pages and [item limit] comments. Identify unmet needs and actions with supporting quotes. If retrieval is partial, preserve results and resume only with valid continuation tokens within remaining limits.

ベストプラクティス

Use a trusted, reviewed CLI version and configure the API key privately through the expected environment variable.
Set page and item limits before expanding collection, and monitor provider usage when retrieving replies.
State sample coverage, quote only returned text, and separate evidence from interpretation.

回避

Treating one note or the first page as representative of all Xiaohongshu users.
Inventing comment quotations or treating reply previews as complete conversations.
Restarting partial retrieval from the first page or using unlimited collection without an agreed usage budget.

よくある質問

What input does this skill accept?

Provide a Xiaohongshu note link, short link, share text, or complete note ID. Specific reply retrieval also requires a parent comment ID.

What is required for live retrieval?

Configure SOCIALDATAX_API_KEY and use a working Node.js/npm CLI environment or existing MCP tools. Network access and provider balance may be required.

Does it analyze every comment on Xiaohongshu?

No. Analysis covers returned comments for the supplied note. Page limits, reply coverage, and retrieval failures can further restrict the sample.

Does it publish comments or change my account?

The documented workflow is read-only and excludes login, posting, likes, comments, and account changes. External package behavior was not verified in this audit.

What happens when retrieval is incomplete?

Keep collected results and disclose missing coverage. Resume using valid continuation tokens within remaining limits, rather than automatically restarting from the first page.

Is an MCP server required?

No. The documented CLI supports agents with shell access. Existing MCP tools are an alternative when already available.