スキル maxhub-skills
📦
maxhub-skills
v3.2.0 コンテンツリビジョン r1 重大 🌐 ネットワークアクセス🔑 環境変数⚙️ 外部コマンド
MaxHub ソーシャルプラットフォーム API を照会
チームには、ソーシャルプラットフォーム API リファレンスを確認し、データクエリを計画するための一元的な場所が必要です。このスキルは、Claude、Codex、Claude Code のワークフロー向けに、MaxHub のエンドポイント、パラメータ、利用パターンを整理します。
対応: Claude Codex Code(CC)
この Skill を自動インストールしないでください。
基準ポリシーにより、インストール操作の前にオペレーターのレビューが必要です。
自分のエージェントでインストール
このリクエストをエージェントにコピーしてください。正規の Skill ページとマニフェストが含まれています。
エージェントリクエスト
Review the Skillstore skill "maxhub-skills" from https://skillstore.io/skills/xiewxx-maxhub-skills.md and its manifest at https://skillstore.io/api/skills/xiewxx-maxhub-skills/manifest. Verify the artifact. Do not auto-install. Inspect the skill and report your findings, then wait for an operator or manual installation decision.エージェントは引き続き計画を提示し、セキュリティポリシーで必要な確認を求める必要があります。
エージェントが読めるリソース
AI エージェント、クローラー、スクリプトがページ全体ではなく整理されたコンテキストを必要とする場合は、これらのリンクを使ってください。
テストする
「maxhub-skills」を使用しています。 TikTok クリエイター分析を照会する最も安全な方法を見つけてください。
期待される結果:
このスキルは、クリエイター分析のエンドポイントグループを特定し、必要な MaxHub 認証を一覧化し、Cookie ベースまたは署名生成ヘルパーの使用を避けるよう警告します。
「maxhub-skills」を使用しています。 WeChat と Lemon8 の検索機能を比較してください。
期待される結果:
このスキルは、各プラットフォームで利用可能な検索およびコンテンツエンドポイントを要約し、パラメータ要件、ページネーション制限、認証情報の境界を示します。
「maxhub-skills」を使用しています。 署名ヘルパーエンドポイントを使用すべきかレビューしてください。
期待される結果:
このスキルは、署名ヘルパーを高リスクとして指摘し、anti-bot 回避やプラットフォーム保護回避のワークフローを避けるよう推奨します。
セキュリティ監査
重大v4 • 2026/7/8 バージョン別レポートを開く
Most static command, network, blocker, and obfuscation matches are documentation false positives. I confirmed credential handling risk for MAXHUB_API_KEY and added semantic findings for TikTok security bypass helpers, metric manipulation, user-cookie forwarding, and a security pre-approval claim. The skill should not be published until those high-risk capabilities and claims are removed or isolated.
33
スキャンされたファイル
13,250
解析済み行数
67
レビュー項目
0
誤検知を無視
確認済みのセキュリティ上の懸念 (4)
重大
maxhub-tiktok/SKILL.md:127-133maxhub-tiktok/references/api-video.md:7-35maxhub-tiktok/references/api-video.md:3916-4118
Platform Security Bypass Helpers Exposed
The TikTok routes include helpers for request signatures, encryption, fingerprints, msToken values, device registration, and guest cookies. These capabilities can support bypassing platform anti-automation controls.
The endpoint names and descriptions directly reference signatures, encryption, fingerprints, msToken generation, and device registration. This is strong semantic evidence of platform security bypass tooling.
重大
Metric Manipulation Endpoint Exposed
The TikTok API reference documents a function that increases a video play count and returns a success status. This is a platform manipulation capability, not a read-only data query.
The cited description says the endpoint increases a work video play count and reports success or failure. That directly supports business-logic abuse and contradicts read-only positioning.
高
maxhub-tiktok/SKILL.md:66-78maxhub-tiktok/references/api-user.md:96-114maxhub-tiktok/references/api-user.md:161-181
User Cookie Forwarding to Third Party
Several TikTok endpoints accept or require user cookies for account-specific data. Forwarding browser cookies to MaxHub can expose account sessions and private user data.
The documentation explicitly warns that some endpoints require platform session cookies and shows cookie parameters. Cookies can authorize account access beyond simple public data retrieval.
高
Prompt Injection Attempt Detected
RECOMMENDATION.md claims the skill has passed ClawHub security review. Security pre-approval claims can bias automated review and must not be treated as authoritative.
The file contains a direct security-approval claim in marketplace-facing prose. It does not issue an explicit override command, so confidence is high but not maximal.
機能レビュー項目 (67)
これらは、このスキルに期待される可能性のある実際のローカル機能であるため、レビューが必要ですが、確認済みの悪意ある動作としてはカウントされません。
高
Generic API/secret keys
2. 配置:`openclaw config set skills.entries.maxhub-lemon8.apiKey "<你的-key>"` 或 `export MAXHUB_API_KEY=
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
高
Generic API/secret keys
2. Configure: `openclaw config set skills.entries.maxhub-lemon8.apiKey "<your-key>"` or `export MAXH
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
高
Generic API/secret keys
Auth: `Authorization: Bearer $MAXHUB_API_KEY`
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
高
Generic API/secret keys
Auth: `Authorization: Bearer $MAXHUB_API_KEY`
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
高
Generic API/secret keys
primaryEnv: MAXHUB_API_KEY
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
高
Generic API/secret keys
- MAXHUB_API_KEY
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
高
Generic API/secret keys
- name: MAXHUB_API_KEY
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
高
Generic API/secret keys
Use the configured `MAXHUB_API_KEY` value as the `Authorization: Bearer` request header.
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
高
Generic API/secret keys
maxhub_auth_header="Authorization: Bearer ${MAXHUB_API_KEY}"
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
高
Generic API/secret keys
[ -n "${MAXHUB_API_KEY:-}" ] && echo "ok" || echo "missing"
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
高
Generic API/secret keys
> - OpenClaw/ClawHub:`openclaw config set skills.entries.maxhub-lemon8.apiKey "你的_API_KEY"`
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
高
Generic API/secret keys
> - 通用环境变量:`export MAXHUB_API_KEY="你的_API_KEY"`
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
高
Generic API/secret keys
> - OpenClaw/ClawHub: `openclaw config set skills.entries.maxhub-lemon8.apiKey "YOUR_API_KEY"`
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
高
Generic API/secret keys
> - Generic: `export MAXHUB_API_KEY="YOUR_API_KEY"`
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
高
Generic API/secret keys
2. 配置:`openclaw config set skills.entries.maxhub-tiktok.apiKey "<你的-key>"` 或 `export MAXHUB_API_KEY=
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
高
Generic API/secret keys
2. Configure: `openclaw config set skills.entries.maxhub-tiktok.apiKey "<your-key>"` or `export MAXH
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
高
Generic API/secret keys
Auth: `Authorization: Bearer $MAXHUB_API_KEY`
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
高
Generic API/secret keys
Auth: `Authorization: Bearer $MAXHUB_API_KEY`
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
高
Generic API/secret keys
Auth: `Authorization: Bearer $MAXHUB_API_KEY`
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
高
Generic API/secret keys
Auth: `Authorization: Bearer $MAXHUB_API_KEY`
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
高
Generic API/secret keys
primaryEnv: MAXHUB_API_KEY
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
高
Generic API/secret keys
- MAXHUB_API_KEY
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
高
Generic API/secret keys
- name: MAXHUB_API_KEY
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
高
Generic API/secret keys
Use the configured `MAXHUB_API_KEY` value as the `Authorization: Bearer` request header.
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
高
Generic API/secret keys
maxhub_auth_header="Authorization: Bearer ${MAXHUB_API_KEY}"
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
高
Generic API/secret keys
[ -n "${MAXHUB_API_KEY:-}" ] && echo "ok" || echo "missing"
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
高
Generic API/secret keys
> - OpenClaw/ClawHub:`openclaw config set skills.entries.maxhub-tiktok.apiKey "你的_API_KEY"`
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
高
Generic API/secret keys
> - 通用环境变量:`export MAXHUB_API_KEY="你的_API_KEY"`
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
高
Generic API/secret keys
> - OpenClaw/ClawHub: `openclaw config set skills.entries.maxhub-tiktok.apiKey "YOUR_API_KEY"`
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
高
Generic API/secret keys
> - Generic: `export MAXHUB_API_KEY="YOUR_API_KEY"`
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
高
Generic API/secret keys
2. 配置:`openclaw config set skills.entries.maxhub-toutiao.apiKey "<你的-key>"` 或 `export MAXHUB_API_KEY
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
高
Generic API/secret keys
2. Configure: `openclaw config set skills.entries.maxhub-toutiao.apiKey "<your-key>"` or `export MAX
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
高
Generic API/secret keys
Auth: `Authorization: Bearer $MAXHUB_API_KEY`
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
高
Generic API/secret keys
primaryEnv: MAXHUB_API_KEY
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
高
Generic API/secret keys
- MAXHUB_API_KEY
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
高
Generic API/secret keys
- name: MAXHUB_API_KEY
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
高
Generic API/secret keys
Use the configured `MAXHUB_API_KEY` value as the `Authorization: Bearer` request header.
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
高
Generic API/secret keys
maxhub_auth_header="Authorization: Bearer ${MAXHUB_API_KEY}"
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
高
Generic API/secret keys
[ -n "${MAXHUB_API_KEY:-}" ] && echo "ok" || echo "missing"
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
高
Generic API/secret keys
> - OpenClaw/ClawHub:`openclaw config set skills.entries.maxhub-toutiao.apiKey "你的_API_KEY"`
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
高
Generic API/secret keys
> - 通用环境变量:`export MAXHUB_API_KEY="你的_API_KEY"`
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
高
Generic API/secret keys
> - OpenClaw/ClawHub: `openclaw config set skills.entries.maxhub-toutiao.apiKey "YOUR_API_KEY"`
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
高
Generic API/secret keys
> - Generic: `export MAXHUB_API_KEY="YOUR_API_KEY"`
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
高
Generic API/secret keys
2. 配置:`openclaw config set skills.entries.maxhub-wechat.apiKey "<你的-key>"` 或 `export MAXHUB_API_KEY=
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
高
Generic API/secret keys
2. Configure: `openclaw config set skills.entries.maxhub-wechat.apiKey "<your-key>"` or `export MAXH
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
高
Generic API/secret keys
Auth: `Authorization: Bearer $MAXHUB_API_KEY`
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
高
Generic API/secret keys
Auth: `Authorization: Bearer $MAXHUB_API_KEY`
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
高
Generic API/secret keys
primaryEnv: MAXHUB_API_KEY
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
高
Generic API/secret keys
- MAXHUB_API_KEY
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
高
Generic API/secret keys
- name: MAXHUB_API_KEY
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
高
Generic API/secret keys
Use the configured `MAXHUB_API_KEY` value as the `Authorization: Bearer` request header.
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
高
Generic API/secret keys
maxhub_auth_header="Authorization: Bearer ${MAXHUB_API_KEY}"
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
高
Generic API/secret keys
[ -n "${MAXHUB_API_KEY:-}" ] && echo "ok" || echo "missing"
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
高
Generic API/secret keys
> - OpenClaw/ClawHub:`openclaw config set skills.entries.maxhub-wechat.apiKey "你的_API_KEY"`
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
高
Generic API/secret keys
> - 通用环境变量:`export MAXHUB_API_KEY="你的_API_KEY"`
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
高
Generic API/secret keys
> - OpenClaw/ClawHub: `openclaw config set skills.entries.maxhub-wechat.apiKey "YOUR_API_KEY"`
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
高
Generic API/secret keys
> - Generic: `export MAXHUB_API_KEY="YOUR_API_KEY"`
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
高
Generic API/secret keys
export MAXHUB_API_KEY=mh_sk_your_api_key_here
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
高
Generic API/secret keys
export MAXHUB_API_KEY=mh_sk_your_api_key_here
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
高
Generic API/secret keys
export MAXHUB_API_KEY=mh_sk_your_api_key_here
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
高
Generic API/secret keys
primaryEnv: MAXHUB_API_KEY
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
高
Generic API/secret keys
- MAXHUB_API_KEY
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
高
Generic API/secret keys
- name: MAXHUB_API_KEY
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
高
Generic API/secret keys
所有技能统一通过 `MAXHUB_API_KEY` 认证,Base URL 为 `https://www.aconfig.cn`。
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
高
Generic API/secret keys
MAXHUB_API_KEY="your_api_key_here"
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
高
Generic API/secret keys
maxhub_auth_header="Authorization: Bearer ${MAXHUB_API_KEY}"
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
高
Generic API/secret keys
- **frontmatter.metadata.openclaw.primaryEnv**:统一为 `MAXHUB_API_KEY`
The snippet documents use of MAXHUB_API_KEY or an API key placeholder for Bearer authentication. No hardcoded secret is present, but the skill handles a sensitive user credential and sends it to MaxHub.
リスク要因
🌐 ネットワークアクセス (106)
maxhub-lemon8/_meta.json:6 maxhub-lemon8/_meta.json:7 maxhub-lemon8/SKILL.md:18 maxhub-lemon8/SKILL.md:22 maxhub-lemon8/SKILL.md:30 maxhub-lemon8/SKILL.md:32 maxhub-lemon8/SKILL.md:45 maxhub-lemon8/SKILL.md:53 maxhub-lemon8/SKILL.md:57 maxhub-lemon8/SKILL.md:77 maxhub-lemon8/SKILL.md:88 maxhub-tiktok/_meta.json:6 maxhub-tiktok/_meta.json:7 maxhub-tiktok/references/api-ads-analytics.md:660 maxhub-tiktok/references/api-ads-analytics.md:662 maxhub-tiktok/references/api-ads-analytics.md:663 maxhub-tiktok/references/api-ads-analytics.md:664 maxhub-tiktok/references/api-ads-analytics.md:665 maxhub-tiktok/references/api-search.md:564 maxhub-tiktok/references/api-search.md:574 maxhub-tiktok/references/api-search.md:666 maxhub-tiktok/references/api-search.md:670 maxhub-tiktok/references/api-search.md:671 maxhub-tiktok/references/api-search.md:675 maxhub-tiktok/references/api-search.md:676 maxhub-tiktok/references/api-user.md:57 maxhub-tiktok/references/api-user.md:479 maxhub-tiktok/references/api-user.md:482 maxhub-tiktok/references/api-user.md:483 maxhub-tiktok/references/api-user.md:487 maxhub-tiktok/references/api-user.md:488 maxhub-tiktok/references/api-user.md:495 maxhub-tiktok/references/api-user.md:496 maxhub-tiktok/references/api-video.md:4305 maxhub-tiktok/references/api-video.md:4326 maxhub-tiktok/references/api-video.md:4328 maxhub-tiktok/references/api-video.md:4517 maxhub-tiktok/references/api-video.md:4521 maxhub-tiktok/references/api-video.md:4522 maxhub-tiktok/references/api-video.md:4526 maxhub-tiktok/references/api-video.md:4527 maxhub-tiktok/references/api-video.md:4665 maxhub-tiktok/references/api-video.md:4669 maxhub-tiktok/references/api-video.md:4970 maxhub-tiktok/references/api-video.md:4974 maxhub-tiktok/references/api-video.md:4980 maxhub-tiktok/references/api-video.md:4984 maxhub-tiktok/references/api-video.md:5319 maxhub-tiktok/references/api-video.md:5321 maxhub-tiktok/references/api-video.md:5322 maxhub-tiktok/references/api-video.md:5323 maxhub-tiktok/references/api-video.md:5324 maxhub-tiktok/references/api-video.md:5431 maxhub-tiktok/references/api-video.md:5437 maxhub-tiktok/references/api-video.md:5541 maxhub-tiktok/references/api-video.md:5542 maxhub-tiktok/references/api-video.md:5658 maxhub-tiktok/references/api-video.md:5662 maxhub-tiktok/references/api-video.md:5663 maxhub-tiktok/references/api-video.md:5672 maxhub-tiktok/references/api-video.md:5740 maxhub-tiktok/references/api-video.md:5742 maxhub-tiktok/references/api-video.md:5747 maxhub-tiktok/references/api-video.md:5749 maxhub-tiktok/SKILL.md:18 maxhub-tiktok/SKILL.md:22 maxhub-tiktok/SKILL.md:30 maxhub-tiktok/SKILL.md:32 maxhub-tiktok/SKILL.md:45 maxhub-tiktok/SKILL.md:53 maxhub-tiktok/SKILL.md:57 maxhub-tiktok/SKILL.md:75 maxhub-tiktok/SKILL.md:77 maxhub-tiktok/SKILL.md:98 maxhub-tiktok/SKILL.md:109 maxhub-toutiao/_meta.json:6 maxhub-toutiao/_meta.json:7 maxhub-toutiao/SKILL.md:18 maxhub-toutiao/SKILL.md:22 maxhub-toutiao/SKILL.md:30 maxhub-toutiao/SKILL.md:32 maxhub-toutiao/SKILL.md:45 maxhub-toutiao/SKILL.md:53 maxhub-toutiao/SKILL.md:57 maxhub-toutiao/SKILL.md:77 maxhub-toutiao/SKILL.md:88 maxhub-wechat/_meta.json:6 maxhub-wechat/_meta.json:7 maxhub-wechat/SKILL.md:18 maxhub-wechat/SKILL.md:22 maxhub-wechat/SKILL.md:30 maxhub-wechat/SKILL.md:32 maxhub-wechat/SKILL.md:45 maxhub-wechat/SKILL.md:53 maxhub-wechat/SKILL.md:57 maxhub-wechat/SKILL.md:77 maxhub-wechat/SKILL.md:88 README.md:47 README.md:196 RECOMMENDATION.md:151 SKILL.md:18 SKILL.md:22 SKILL.md:30 SKILL.md:34 SKILL.md:149 SKILL.md:153
🔑 環境変数 (67)
maxhub-lemon8/README_CN.md:22 maxhub-lemon8/README.md:22 maxhub-lemon8/references/api-post-user.md:4 maxhub-lemon8/references/api-search-discover.md:4 maxhub-lemon8/SKILL.md:10 maxhub-lemon8/SKILL.md:13 maxhub-lemon8/SKILL.md:17 maxhub-lemon8/SKILL.md:47 maxhub-lemon8/SKILL.md:50 maxhub-lemon8/SKILL.md:68 maxhub-lemon8/SKILL.md:80 maxhub-lemon8/SKILL.md:81 maxhub-lemon8/SKILL.md:91 maxhub-lemon8/SKILL.md:92 maxhub-tiktok/README_CN.md:26 maxhub-tiktok/README.md:26 maxhub-tiktok/references/api-ads-analytics.md:4 maxhub-tiktok/references/api-search.md:4 maxhub-tiktok/references/api-user.md:4 maxhub-tiktok/references/api-video.md:4 maxhub-tiktok/SKILL.md:10 maxhub-tiktok/SKILL.md:13 maxhub-tiktok/SKILL.md:17 maxhub-tiktok/SKILL.md:47 maxhub-tiktok/SKILL.md:50 maxhub-tiktok/SKILL.md:89 maxhub-tiktok/SKILL.md:101 maxhub-tiktok/SKILL.md:102 maxhub-tiktok/SKILL.md:112 maxhub-tiktok/SKILL.md:113 maxhub-toutiao/README_CN.md:20 maxhub-toutiao/README.md:20 maxhub-toutiao/references/api-content-user.md:4 maxhub-toutiao/SKILL.md:10 maxhub-toutiao/SKILL.md:13 maxhub-toutiao/SKILL.md:17 maxhub-toutiao/SKILL.md:47 maxhub-toutiao/SKILL.md:50 maxhub-toutiao/SKILL.md:68 maxhub-toutiao/SKILL.md:80 maxhub-toutiao/SKILL.md:81 maxhub-toutiao/SKILL.md:91 maxhub-toutiao/SKILL.md:92 maxhub-wechat/README_CN.md:21 maxhub-wechat/README.md:21 maxhub-wechat/references/api-channels.md:4 maxhub-wechat/references/api-mp.md:4 maxhub-wechat/SKILL.md:10 maxhub-wechat/SKILL.md:13 maxhub-wechat/SKILL.md:17 maxhub-wechat/SKILL.md:47 maxhub-wechat/SKILL.md:50 maxhub-wechat/SKILL.md:68 maxhub-wechat/SKILL.md:80 maxhub-wechat/SKILL.md:81 maxhub-wechat/SKILL.md:91 maxhub-wechat/SKILL.md:92 README.md:46 README.md:195 RECOMMENDATION.md:150 SKILL.md:10 SKILL.md:13 SKILL.md:17 SKILL.md:34 SKILL.md:146 SKILL.md:147 SKILL.md:199
⚙️ 外部コマンド (107)
maxhub-lemon8/SKILL.md:45 maxhub-lemon8/SKILL.md:47 maxhub-lemon8/SKILL.md:49-61 maxhub-lemon8/SKILL.md:61-67 maxhub-lemon8/SKILL.md:67-69 maxhub-lemon8/SKILL.md:69-80 maxhub-lemon8/SKILL.md:80-81 maxhub-lemon8/SKILL.md:81-91 maxhub-lemon8/SKILL.md:91-92 maxhub-lemon8/SKILL.md:92-106 maxhub-lemon8/SKILL.md:106-107 maxhub-lemon8/SKILL.md:107-108 maxhub-lemon8/SKILL.md:108-160 maxhub-tiktok/SKILL.md:45 maxhub-tiktok/SKILL.md:47 maxhub-tiktok/SKILL.md:49-61 maxhub-tiktok/SKILL.md:61-75 maxhub-tiktok/SKILL.md:75-77 maxhub-tiktok/SKILL.md:77-88 maxhub-tiktok/SKILL.md:88-90 maxhub-tiktok/SKILL.md:90-101 maxhub-tiktok/SKILL.md:101-102 maxhub-tiktok/SKILL.md:102-112 maxhub-tiktok/SKILL.md:112-113 maxhub-tiktok/SKILL.md:113-127 maxhub-tiktok/SKILL.md:127-128 maxhub-tiktok/SKILL.md:128-129 maxhub-tiktok/SKILL.md:129-130 maxhub-tiktok/SKILL.md:130-131 maxhub-tiktok/SKILL.md:131-132 maxhub-tiktok/SKILL.md:132-133 maxhub-tiktok/SKILL.md:133-192 maxhub-toutiao/SKILL.md:45 maxhub-toutiao/SKILL.md:47 maxhub-toutiao/SKILL.md:49-61 maxhub-toutiao/SKILL.md:61-67 maxhub-toutiao/SKILL.md:67-69 maxhub-toutiao/SKILL.md:69-80 maxhub-toutiao/SKILL.md:80-81 maxhub-toutiao/SKILL.md:81-91 maxhub-toutiao/SKILL.md:91-92 maxhub-toutiao/SKILL.md:92-106 maxhub-toutiao/SKILL.md:106-154 maxhub-wechat/SKILL.md:45 maxhub-wechat/SKILL.md:47 maxhub-wechat/SKILL.md:49-61 maxhub-wechat/SKILL.md:61-67 maxhub-wechat/SKILL.md:67-69 maxhub-wechat/SKILL.md:69-80 maxhub-wechat/SKILL.md:80-81 maxhub-wechat/SKILL.md:81-91 maxhub-wechat/SKILL.md:91-92 maxhub-wechat/SKILL.md:92-106 maxhub-wechat/SKILL.md:106-107 maxhub-wechat/SKILL.md:107-165 SKILL.md:34 SKILL.md:67 SKILL.md:68 SKILL.md:69 SKILL.md:70 SKILL.md:71 SKILL.md:72 SKILL.md:73 SKILL.md:79 SKILL.md:80 SKILL.md:81 SKILL.md:82 SKILL.md:83 SKILL.md:84 SKILL.md:85 SKILL.md:86 SKILL.md:87 SKILL.md:88 SKILL.md:94 SKILL.md:95 SKILL.md:96 SKILL.md:100-139 SKILL.md:139-145 SKILL.md:145-151 SKILL.md:151-161 SKILL.md:161-162 SKILL.md:162-163 SKILL.md:163-164 SKILL.md:164-165 SKILL.md:165-166 SKILL.md:166-167 SKILL.md:167-173 SKILL.md:173-174 SKILL.md:174-175 SKILL.md:175-176 SKILL.md:176-177 SKILL.md:177-178 SKILL.md:178-179 SKILL.md:179-180 SKILL.md:180-181 SKILL.md:181-182 SKILL.md:182-183 SKILL.md:183-189 SKILL.md:189-190 SKILL.md:190-191 SKILL.md:191-192 SKILL.md:192 SKILL.md:193-197 SKILL.md:197-199 SKILL.md:199-201 SKILL.md:201-205 SKILL.md:205-211
監査者: codex 監査履歴を表示 →
このレポートを共有・引用
バージョン付き評価レポート、中立的なバッジ、埋め込みカード、引用を共有できます。Skillstore は証拠を報告しますが、この Skill が安全かどうかは判断しません。
レポートリンクをコピー
https://skillstore.io/skills/xiewxx-maxhub-skills/audits/4?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdownバッジ
[](https://skillstore.io/skills/xiewxx-maxhub-skills?utm_source=security_passport_badge)HTMLバッジ
<a href="https://skillstore.io/skills/xiewxx-maxhub-skills?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/xiewxx-maxhub-skills/security.svg" alt="Skillstore security assessment" loading="lazy"></a>埋め込みカード
<iframe src="https://skillstore.io/embed/skills/xiewxx-maxhub-skills.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>学術引用 (APA · BibTeX · CFF)
APA形式の引用
XieWxx. (2026). maxhub-skills security audit report (audit version 4) [Author version 3.2.0]. Skillstore. https://skillstore.io/skills/xiewxx-maxhub-skills/audits/4BibTeX形式の引用
@techreport{xiewxx-xiewxx-maxhub-skills-2026,
author = {XieWxx},
title = {maxhub-skills security audit report (audit version 4)},
institution = {Skillstore},
year = {2026},
number = {4},
url = {https://skillstore.io/skills/xiewxx-maxhub-skills/audits/4},
note = {Author version 3.2.0}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "maxhub-skills security audit report (audit version 4)"
version: "3.2.0"
type: report
authors:
- name: "XieWxx"
date-released: "2026-07-08"
url: "https://skillstore.io/skills/xiewxx-maxhub-skills/audits/4"
identifiers:
- type: other
value: "skillstore:xiewxx-maxhub-skills:audit:4"
description: "Skillstore immutable audit report identifier"
Skillstore スコア
このスコアの理由 証拠の信頼度: 中 55
アーキテクチャ
100
保守性
87
コンテンツ
68
コミュニティ
100
仕様準拠
作成できるもの
プラットフォームのトレンドデータを比較
レポートを作成する前に、TikTok、Lemon8、Toutiao、WeChat 全体でトレンドコンテンツを取得できるエンドポイントグループを確認します。
コンテンツ分析クエリを準備
計画中のコンテンツパフォーマンスレビューに必要な動画、ユーザー、検索、コメントのエンドポイントを特定します。
統合前に API カバレッジを確認
MaxHub API 呼び出しを実装する前に、サポートされているエンドポイント、必須パラメータ、認証ルールを確認します。
これらのプロンプトを試す
基本的なエンドポイントを探す
maxhub-skills を使用して、キーワードで TikTok 動画を検索できる MaxHub エンドポイントグループを見つけてください。必要な API キー設定と主要パラメータを説明してください。
ユーザー調査クエリを計画
maxhub-skills を使用して、Lemon8 のユーザー調査ワークフローを計画してください。エンドポイントカテゴリ、必要な識別子、ページネーションの安全な上限を含めてください。
プラットフォームの選択肢を比較
maxhub-skills を使用して、公開コンテンツのトレンド追跡に利用できる TikTok、Toutiao、WeChat のデータクエリオプションを比較してください。
統合計画を監査
maxhub-skills を使用して、認証情報の扱い、エンドポイント選定、レート制限、避けるべき高リスク機能について、私の MaxHub 統合計画をレビューしてください。
ベストプラクティス
- スコープを限定したテスト用認証情報を使用し、評価後にローテーションしてください。
- 読み取り専用の公開データエンドポイントを優先し、Cookie ベースのワークフローは避けてください。
- 特に TikTok ツールやインタラクション操作については、実行前にエンドポイントの目的を確認してください。
回避
- プラットフォームの anti-bot 署名を生成したり、保護機能を回避したりする目的でこのスキルを使用しないでください。
- 正式なデータ処理契約がない限り、ブラウザ Cookie 全体を送信しないでください。
- いいね、フォロー、コメント、プライベートメッセージ、指標操作を自動化しないでください。
よくある質問
このスキルは MaxHub API を直接呼び出しますか？
MaxHub API の呼び出し方法を文書化し、curl の例を含んでいます。実行時の動作は、ホストツールとユーザー権限に依存します。
API キーは必要ですか？
はい。ドキュメントでは MAXHUB_API_KEY が必要であり、それを bearer token として MaxHub サービスに送信します。
複数のプラットフォームを照会できますか？
はい。このシャードには TikTok、Lemon8、Toutiao、WeChat のスキルが含まれており、ルートドキュメントではより大きな MaxHub コレクションが参照されています。
今すぐ公開しても安全ですか？
いいえ。監査では、高リスクの回避、操作、認証情報、保護されたメディアの復号に関するガイダンスが見つかりました。
なぜコマンドに関する検出事項が報告されたのですか？
コマンドに関する検出事項の多くは、curl、環境変数、インストールに関する Markdown の例です。ただし、ユーザーが実際の認証情報で実行する場合は依然として機密性があります。
公開前に何を削除すべきですか？
公開前に、anti-bot 署名ヘルパー、指標操作エンドポイント、インタラクション自動化、プライベートメッセージヘルパー、保護されたメディアの復号ガイダンスを削除してください。