Навыки xhs-trend-insights-v2

📦

xhs-trend-insights-v2

Name: xhs-trend-insights-v2
Author: devinchen2014

Ревизия содержимого r1 Средний риск ⚙️ Внешние команды🌐 Доступ к сети🔑 Переменные окружения

Explore Xiaohongshu Trends and Content Ideas

Content teams need current Xiaohongshu signals without confusing limited samples with platform-wide trends. This skill guides SocialDataX queries and organizes ranked topics, relevant posts, and evidence-based content directions.

Поддерживает: Claude Codex Code(CC)

📊 63 Адекватно

Maintain this Skill? Claim it 📊 63 Адекватно

Установить с помощью моего Агента

Скопируйте этот запрос в своего Агента. Он содержит каноническую страницу Skill и манифест.

Запрос агента

Review the Skillstore skill "xhs-trend-insights-v2" from https://skillstore.io/skills/devinchen2014-xhs-trend-insights-v2.md and its manifest at https://skillstore.io/api/skills/devinchen2014-xhs-trend-insights-v2/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Ваш Агент по-прежнему должен показать план и запросить все подтверждения, требуемые политикой безопасности.

Ресурсы для AI-агентов

Используйте эти ссылки, когда AI-агенту, crawler или script нужен чистый контекст вместо полной страницы.

Markdown-детали GET /skills/devinchen2014-xhs-trend-insights-v2.md Подписанный manifest GET /api/skills/devinchen2014-xhs-trend-insights-v2/manifest Подписанный lockfile GET /api/skills/devinchen2014-xhs-trend-insights-v2/lockfile

Протестировать

Использование «xhs-trend-insights-v2». Illustrative supplied hot-search sample: budget lunch ranks third; no earlier ranking is available. Summarize the signal.

Ожидаемый результат:

Observed signal: budget lunch ranks third in the supplied snapshot.
Interpretation: the topic is a candidate for further research, not evidence of sustained growth.
Next step: search related notes and compare visible content angles.

Использование «xhs-trend-insights-v2». Illustrative supplied sample: 12 recent image notes about desk organization; titles mention cable storage and small desks. Suggest content directions.

Ожидаемый результат:

Scope: 12 supplied image notes, not complete platform coverage.
Observed angles: cable storage and small-desk organization appear in the supplied titles.
Suggested directions: a cable-storage comparison and a small-desk layout checklist.
Boundary: title patterns do not establish audience demand or expected campaign performance.

Использование «xhs-trend-insights-v2». A search returned partial results and a continuation token. The original limit was 20 items; 12 were collected.

Ожидаемый результат:

Status: results are incomplete; retain the 12 collected items and the reported error.
Recovery: after resolving the error, continue with the returned token and unchanged query conditions.
Remaining limit: collect at most eight additional items, subject to the remaining page allowance.

Аудит безопасности

Средний риск

v1 • 02.11.2026 Открыть версионный отчет

All 44 static findings are false positives involving Markdown backticks, documented service links, expected credential configuration, or readable Chinese text. Two contextual risks remain: executing an unpinned npm package and requiring token-bearing result links in shared outputs. No evidence found of malicious exfiltration or attempts to override the audit.

Просканировано файлов

118

Проанализировано строк

Пункты проверки

Ложные срабатывания проигнорированы

Подтверждённые проблемы безопасности (2)

Средний

SKILL.md:32-38 SKILL.md:89

Unpinned Remote Package Execution

The examples use npx -y socialdatax-skills@latest, automatically executing a mutable npm release in an environment containing the service API key. A compromised future release could access that key or local files; the package implementation is not included in this review.

Both commands explicitly select @latest with -y, and the runtime credential requirement is documented. This establishes mutable dependency exposure, not evidence of actual package compromise.

Средний

SKILL.md:68

Unconditional Sharing of Token-Bearing Result Links

The instruction requires preserving xsec_token in every answer, stored output, citation, and forwarded URL, and explicitly forbids redaction. This may expose link access tokens beyond the intended audience; their authorization scope is not documented.

The mandatory inclusion of xsec_token and prohibition on redaction are explicit. Token sensitivity and account-level access are unverified, so the finding concerns uncontrolled link-token disclosure.

Факторы риска

⚙️ Внешние команды (33)

🌐 Доступ к сети (3)

SKILL.md:7 SKILL.md:25 SKILL.md:100

🔑 Переменные окружения (6)

SKILL.md:7 SKILL.md:25 SKILL.md:89 SKILL.md:99 SKILL.md:101 SKILL.md:107

Аудитор:: codex

Поделиться и цитировать этот отчет

Делитесь версионным отчетом об оценке, нейтральным значком, встраиваемой карточкой и цитатами. Skillstore публикует доказательства, не решая, безопасен ли этот Skill.

Открыть версионный отчет

Копировать ссылку на отчёт

https://skillstore.io/skills/devinchen2014-xhs-trend-insights-v2/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Значок Markdown

[![Skillstore security assessment](https://skillstore.io/badges/skills/devinchen2014-xhs-trend-insights-v2/security.svg)](https://skillstore.io/skills/devinchen2014-xhs-trend-insights-v2?utm_source=security_passport_badge)

Значок HTML

<a href="https://skillstore.io/skills/devinchen2014-xhs-trend-insights-v2?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/devinchen2014-xhs-trend-insights-v2/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Встраиваемая карточка

<iframe src="https://skillstore.io/embed/skills/devinchen2014-xhs-trend-insights-v2.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Академические ссылки (APA · BibTeX · CFF)

Цитата APA

devinchen2014. (2026). xhs-trend-insights-v2 security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/devinchen2014-xhs-trend-insights-v2/audits/1

Цитата BibTeX

@techreport{devinchen2014-devinchen2014-xhs-trend-insights-v2-2026,
  author = {devinchen2014},
  title = {xhs-trend-insights-v2 security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/devinchen2014-xhs-trend-insights-v2/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "xhs-trend-insights-v2 security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "devinchen2014"
date-released: "2026-11-02"
url: "https://skillstore.io/skills/devinchen2014-xhs-trend-insights-v2/audits/1"
identifiers:
  - type: other
    value: "skillstore:devinchen2014-xhs-trend-insights-v2:audit:1"
    description: "Skillstore immutable audit report identifier"

Оценка Skillstore

Почему такая оценка Достоверность доказательств: Средний

Архитектура

Сопровождаемость

Контент

Сообщество

Соответствие спецификации

Что вы можете построить

Review Editorial Opportunities

Review current ranked topics and related note samples to choose focused editorial directions.

Research Brand Conversations

Search a category or brand, compare visible content angles, and document evidence separately from marketing hypotheses.

Develop Creator Topics

Filter recent notes by subject and format to develop practical video or image-post ideas.

Попробуйте эти промпты

Review Current Topics

Show current Xiaohongshu hot-search topics through SocialDataX. Summarize available rankings and heat signals without claiming historical growth.

Explore a Focused Keyword

Search Xiaohongshu for [keyword]. Retrieve one page and at most 20 notes. Separate observed titles and creators from suggested content angles.

Compare Recent Content Formats

Research [topic] over the last seven days. Compare image and video samples, using at most two pages per format. State coverage limits.

Build a Bounded Research Brief

Research [brand or category] over [days] days. Collect at most three pages and 50 notes. Preserve partial results and resume only with valid tokens. Separate hot-search evidence, search observations, and hypotheses. Include sample references while excluding sensitive URL tokens from public output.

Лучшие практики

Start with one page and explicit item limits before expanding the research scope.
Separate rankings, search observations, and interpretations; state date windows and sampling limits.
Use an approved package version, protect API credentials, and review token-bearing links before sharing.

Избегать

Treating one ranked snapshot or a few search pages as complete evidence of platform-wide growth.
Restarting partial searches from the first page or ignoring original collection limits.
Publishing API keys or token-bearing links in public reports, logs, or forwarded messages.

Часто задаваемые вопросы

What information should I provide?

Provide a keyword or topic direction, or request the current hot-search list. Add a time window and collection limit when relevant.

What setup does the skill require?

Configure SOCIALDATAX_API_KEY and provider balance. Direct CLI use needs Node.js and npm; equivalent MCP tools can be used when already available.

Does it access or modify my Xiaohongshu account?

The documented workflow is read-only and does not log in, post, like, comment, or change account settings.

Does it prove that a topic is growing?

No. Current rankings and limited note samples show visible signals, not verified historical growth or complete platform coverage.

How should incomplete results or insufficient balance be handled?

Keep partial results and report the error. Stop balance-related retries, resolve the issue, and resume with a valid continuation token within original limits.

Can I share the returned links?

Review links before sharing because they may contain xsec_token. Keep original links in authorized contexts and remove sensitive tokens from public outputs.