xiaohongshu-workflow

Fail

Audited by Socket on Mar 1, 2026

1 alert found:

Malware
MalwareHIGH
SKILL.md

The skill description is coherent with its stated automation purpose and provides a reasonably complete workflow for Xiaohongshu MCP-based operations. However, it involves sensitive credential handling (cookies), third-party binary downloads, and multi-script memory export flows that expand the trust surface. These patterns warrant cautious review and verifiable integrity controls (signatures/checksums, restricted cookie handling, and minimized data exposure). Overall risk is present but not definitively malicious; treat as SUSPICIOUS with recommended mitigations rather than BENIGN.

Confidence: 95%Severity: 90%
Audit Metadata
Analyzed At
Mar 1, 2026, 07:44 PM
Package URL
pkg:socket/skills-sh/aaaaqwq%2Fclaude-code-skills%2Fxiaohongshu-workflow%2F@dd23b44444282548146eded88b7c418997aa962f