Навыки xhs-creator-content-research

📦

xhs-creator-content-research

Name: xhs-creator-content-research
Author: devinchen2014

Ревизия содержимого r1 Средний риск ⚙️ Внешние команды🌐 Доступ к сети🔑 Переменные окружения

Research Xiaohongshu Creator Content

Creator research requires consistent post evidence across accounts and publishing periods. This skill guides SocialDataX retrieval and organizes available titles, timestamps, engagement signals, and comparison observations.

Поддерживает: Claude Codex Code(CC)

📊 64 Адекватно

Maintain this Skill? Claim it 📊 64 Адекватно

Установить с помощью моего Агента

Скопируйте этот запрос в своего Агента. Он содержит каноническую страницу Skill и манифест.

Запрос агента

Review the Skillstore skill "xhs-creator-content-research" from https://skillstore.io/skills/devinchen2014-xhs-creator-content-research.md and its manifest at https://skillstore.io/api/skills/devinchen2014-xhs-creator-content-research/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Ваш Агент по-прежнему должен показать план и запросить все подтверждения, требуемые политикой безопасности.

Ресурсы для AI-агентов

Используйте эти ссылки, когда AI-агенту, crawler или script нужен чистый контекст вместо полной страницы.

Markdown-детали GET /skills/devinchen2014-xhs-creator-content-research.md Подписанный manifest GET /api/skills/devinchen2014-xhs-creator-content-research/manifest Подписанный lockfile GET /api/skills/devinchen2014-xhs-creator-content-research/lockfile

Протестировать

Использование «xhs-creator-content-research». Review one page from a selected creator profile and summarize the content.

Ожидаемый результат:

Illustrative summary: The retrieved sample emphasizes product demonstrations and practical advice.
Evidence: Available titles, publishing times, engagement signals, and complete note identifiers accompany each observation.
Coverage: One page was reviewed. Earlier posts and missing fields were not inferred.

Использование «xhs-creator-content-research». Compare two creator samples when the second account returns incomplete results.

Ожидаемый результат:

Illustrative comparison: Account A emphasizes tutorials; the available Account B sample emphasizes product reviews.
Coverage: Account B returned partial results, so engagement comparisons remain provisional.
Recovery: Preserve collected posts and continue only with a valid returned token and the remaining collection limits.

Аудит безопасности

Средний риск

v1 • 02.11.2026 Открыть версионный отчет

All 39 static alerts are false positives involving Markdown, service documentation, credential variable names, account identifiers, and readable multilingual text. The instructions separately introduce a supply chain risk by running an unpinned npm package with automatic installation approval. No evidence found of prompt injection, embedded credentials, or intentional exfiltration; the external package implementation was not included for verification.

Просканировано файлов

113

Проанализировано строк

Пункты проверки

Ложные срабатывания проигнорированы

Подтверждённые проблемы безопасности (1)

Средний

SKILL.md:31-39 SKILL.md:84

Unpinned External Package Execution

Both CLI examples run npx -y socialdatax-skills@latest, allowing mutable registry code to execute without an installation prompt. That process can access SOCIALDATAX_API_KEY; compromised future releases could expose credentials or modify local files despite the documented read-only intent.

The examples explicitly select @latest and suppress installation confirmation with -y. This establishes a supply chain exposure, not evidence that the package is malicious.

Факторы риска

⚙️ Внешние команды (26)

🌐 Доступ к сети (3)

SKILL.md:7 SKILL.md:25 SKILL.md:95

🔑 Переменные окружения (6)

SKILL.md:7 SKILL.md:25 SKILL.md:84 SKILL.md:94 SKILL.md:96 SKILL.md:102

Аудитор:: codex

Поделиться и цитировать этот отчет

Делитесь версионным отчетом об оценке, нейтральным значком, встраиваемой карточкой и цитатами. Skillstore публикует доказательства, не решая, безопасен ли этот Skill.

Открыть версионный отчет

Копировать ссылку на отчёт

https://skillstore.io/skills/devinchen2014-xhs-creator-content-research/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Значок Markdown

[![Skillstore security assessment](https://skillstore.io/badges/skills/devinchen2014-xhs-creator-content-research/security.svg)](https://skillstore.io/skills/devinchen2014-xhs-creator-content-research?utm_source=security_passport_badge)

Значок HTML

<a href="https://skillstore.io/skills/devinchen2014-xhs-creator-content-research?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/devinchen2014-xhs-creator-content-research/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Встраиваемая карточка

<iframe src="https://skillstore.io/embed/skills/devinchen2014-xhs-creator-content-research.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Академические ссылки (APA · BibTeX · CFF)

Цитата APA

devinchen2014. (2026). xhs-creator-content-research security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/devinchen2014-xhs-creator-content-research/audits/1

Цитата BibTeX

@techreport{devinchen2014-devinchen2014-xhs-creator-content-research-2026,
  author = {devinchen2014},
  title = {xhs-creator-content-research security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/devinchen2014-xhs-creator-content-research/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "xhs-creator-content-research security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "devinchen2014"
date-released: "2026-11-02"
url: "https://skillstore.io/skills/devinchen2014-xhs-creator-content-research/audits/1"
identifiers:
  - type: other
    value: "skillstore:devinchen2014-xhs-creator-content-research:audit:1"
    description: "Skillstore immutable audit report identifier"

Оценка Skillstore

Почему такая оценка Достоверность доказательств: Средний

Архитектура

Сопровождаемость

Контент

Сообщество

Соответствие спецификации

Что вы можете построить

Review Creator Partnership Fit

Review a creator's recent post topics, formats, and available engagement signals before planning a brand partnership.

Compare Managed Accounts

Collect bounded post samples across selected accounts and compare publishing patterns with clear evidence and coverage limits.

Plan Content Experiments

Study relevant peer accounts and identify topic or format experiments without copying their posts.

Попробуйте эти промпты

Review One Creator

Research this Xiaohongshu profile: [profile URL]. Retrieve one page and summarize available titles, publishing times, and engagement signals. State any missing fields.

Review Recent Publishing

Research account [user ID] for the last [number] days. Collect at most [item limit] posts. Summarize topics and formats. Explain date filtering and coverage.

Compare Creator Samples

Compare [profile A] and [profile B] using at most two pages per account. Separate observed topics, formats, and engagement signals. Preserve full note identifiers.

Resume an Incomplete Comparison

Resume this partial creator comparison: [saved results and pagination state]. Keep the original query and limits. Use valid continuation tokens. Report gaps without restarting completed pages.

Лучшие практики

Use a complete account ID or profile input, and set explicit page or item limits before retrieval.
Keep full note identifiers and continuation tokens unchanged; disclose partial coverage and missing data.
Review the external CLI package before execution, and keep API keys in environment configuration rather than prompts or reports.

Избегать

Requesting all pages without a collection budget or treating a partial response as complete account history.
Truncating continuation tokens, mixing tokens across accounts, or restarting completed pages after a partial failure.
Sharing API keys in chat or assuming a documented read-only workflow verifies an external package's behavior.

Часто задаваемые вопросы

Which account inputs are supported?

Use a Xiaohongshu account ID, profile URL, short link, or profile share text. Choose one input type per call.

What do I need for live retrieval?

Configure SOCIALDATAX_API_KEY and sufficient service balance. Use Node.js and npm for CLI access, or existing compatible MCP tools.

Does this skill change my Xiaohongshu account?

The documented workflow is read-only and excludes login, publishing, likes, comments, and account changes. The external CLI implementation was not audited here.

Can I limit research to recent posts?

The CLI documents --since-days filtering. With MCP, retrieve the needed pages and filter returned publish_time values during analysis.

How should incomplete results be handled?

Preserve collected posts and errors. Resume with a valid continuation token and remaining limits. Do not automatically restart from the first page.

What happens when my balance is insufficient?

Stop repeated retries and use the provider billing page. After funding the correct account, resume according to the existing pagination state.