Skills maxhub-pipixia

📦

maxhub-pipixia

Name: maxhub-pipixia
Author: XieWxx

Low Risk 🌐 Network access⚙️ External commands🔑 Env variables

Query PiPiXia social data with AI

Finding and analyzing content on PiPiXia requires manual browsing with no efficient way to search, compare trends, or extract insights. This skill lets you query PiPiXia data through natural language, search posts, analyze user profiles, track trending topics, and generate structured reports without leaving your AI assistant.

Supports: Claude Codex Code(CC)

🥉 74 Bronze

Download the skill ZIP

Upload in Claude

Go to Settings → Capabilities → Skills → Upload skill

Toggle on and start using

Test it

Using "maxhub-pipixia". Find trending posts about food on PiPiXia

Expected outcome:

Found 15 trending posts about food on PiPiXia.

Top post: 'Home cooking tips that went viral' - 2.3M views
- 156K likes, 23K comments, 8.5K shares
- Posted by user 123456, 3 days ago
- Tags: cooking, recipes, foodie

Trending keywords: street food, hot pot, barbecue

Next steps: Would you like me to analyze comments or find similar creators?

Using "maxhub-pipixia". Analyze user 1310254082831248 on PiPiXia

Expected outcome:

User Profile: CreativeFoodie
- Followers: 45,678 | Following: 2,134
- Total posts: 892
- Joined: March 2023

Recent Posts (top 5):
1. '5-minute breakfast ideas' - 234K views
2. 'Secret restaurant in Shanghai' - 567K views
3. 'Homemade noodles tutorial' - 890K views

The user focuses on food content with high engagement on tutorial-style videos.

Security Audit

Low Risk

v2 • 5/20/2026

This skill is an API wrapper for querying PiPiXia social media data through the MaxHub API. All 225 static analysis findings are false positives. URLs point to the legitimate MaxHub API service at aconfig.cn. Shell execution patterns are markdown code examples showing curl commands for API access. Environment variable MAXHUB_API_KEY is properly declared with sensitive flag and used only for API authentication. No obfuscation, data exfiltration, or malicious patterns were found.

Files scanned

825

Lines analyzed

findings

Total audits

Low Risk Issues (6)

_meta.json:6-7 SKILL.md:18-22

Hardcoded URLs in documentation are legitimate API references

All 22 hardcoded URL findings point to https://www.aconfig.cn, which is the legitimate MaxHub API service. These URLs appear in metadata, README docs, and API reference files as documentation of the API base URL and registration website. This is expected behavior for an API wrapper skill.

SKILL.md:49-61 references/api-post-user.md:3-4

Shell command patterns are markdown code examples

All 123 shell execution findings are curl commands inside markdown code blocks. These are documentation examples showing users how to make API calls. The skill is designed to use curl for querying the MaxHub API, and these patterns are expected for this type of skill.

SKILL.md:10-20 SKILL.md:47-50

Environment variable MAXHUB_API_KEY is properly declared as sensitive

The 16 env_access findings refer to MAXHUB_API_KEY usage. The SKILL.md properly declares this variable with sensitive: true in its metadata, uses it only for API Bearer token authentication, and includes credential handling guidelines that instruct keeping API keys out of output.

references/api-post-user.md:15 references/api-search-trending.md:15

Cryptographic algorithm findings are social media terminology

All 'Weak cryptographic algorithm' findings are triggered by the term 'hashtag' in API parameter documentation (e.g., hashtag_id, hashtag_post_list). 'Hashtag' is a social media term for content categorization on PiPiXia, not a reference to cryptographic hashing.

references/api-post-user.md:17 references/param-mappings.md:9

System reconnaissance findings are example API parameters

All system reconnaissance findings reference example parameter values like user IDs and video IDs in API documentation tables. These are placeholder values used to document API parameter formats, not actual reconnaissance attempts.

SKILL.md:3-25

Dangerous combination heuristic is false positive for API wrapper skill

The static analyzer flagged the combination of external_commands + network + env_access as dangerous. However, this combination is by design for an API wrapper skill: curl is used to make HTTP requests to a single legitimate API, with a properly declared API key. No obfuscation or data exfiltration was detected.

Risk Factors

🌐 Network access (22)

⚙️ External commands (123)

🔑 Env variables (16)

README_CN.md:22 README.md:22 references/api-post-user.md:4 references/api-search-trending.md:4 SKILL.md:10 SKILL.md:13 SKILL.md:17 SKILL.md:47 SKILL.md:50 SKILL.md:68 SKILL.md:80 SKILL.md:81 SKILL.md:81 SKILL.md:91 SKILL.md:92 SKILL.md:92

Audited by: claude View Audit History →

Quality Score

Architecture

100

Maintainability

Content

Community

Security

100

Spec Compliance

What You Can Build

Content trend analysis for creators

Content creators can search trending topics, analyze popular posts, and identify content patterns to guide their creation strategy on PiPiXia.

Community research for operations teams

Operations teams can study user behavior, analyze comment data, and track hashtag trends to understand community dynamics on the platform.

Competitive monitoring for brand teams

Brand teams can monitor popular content, track engagement metrics, and analyze audience preferences on the PiPiXia social platform.

Try These Prompts

Search for posts by keyword

Search for posts about [keyword] on PiPiXia and summarize the top results with key statistics.

Analyze user profile and activity

Get the profile and recent posts for PiPiXia user [user_id], then summarize their content style and engagement levels.

Track trending topics

Fetch today trending topics on PiPiXia and show me the top 10 with their popularity metrics.

Compare post performance

Compare the performance data for these two PiPiXia posts: [post_id_1] and [post_id_2]. Show a side-by-side comparison of likes, comments, and shares.

Best Practices

Start by checking the API key configuration to ensure queries will succeed before making requests
Use specific search terms and known user IDs for more accurate and relevant results
Combine multiple API endpoints for deeper analysis, such as user info plus their recent posts

Avoid

Do not share or expose the MAXHUB_API_KEY value in any output or log message
Do not make excessive repeated calls to the same endpoint to avoid rate limiting
Do not assume data from a single endpoint provides complete context without cross-referencing

Frequently Asked Questions

Do I need an API key to use this skill?

Yes, you need a valid MaxHub API key. Sign up at https://www.aconfig.cn and create an API key in your dashboard.

What data can this skill access on PiPiXia?

The skill can access post details, user profiles, search results, trending topics, comments, hashtag data, and follower information through the MaxHub API.

Is this skill officially affiliated with PiPiXia?

No. This skill uses a third-party API from MaxHub to access PiPiXia data. It is not affiliated with or endorsed by PiPiXia.

Can this skill post or edit content on PiPiXia?

No. The skill is read-only and can only query data. It cannot create, edit, or delete posts or comments.

What languages does the skill support?

The skill supports both Chinese and English. It detects your language and responds with matching number formatting.

How do I configure the API key for this skill?

Set the MAXHUB_API_KEY environment variable with your key. Use export MAXHUB_API_KEY=your_key or configure it through your AI tool settings.