📦 xiaohongshu-search — 小红书搜索
v1.0.0通过已登录的 Chrome 自动搜索小红书公开笔记，提取标题、正文、话题标签与点赞数，快速洞察消费趋势，为市场调研提供一手数据。
0· 117·0 当前·0 累计
by 下载技能包
最后更新
2026/3/24
安全扫描
OpenClaw
可疑
medium confidenceThe skill’s instructions are functionally consistent with web-scraping Xiaohongshu, but requiring/using a remotely-debuggable, already-logged-in Chrome session grants broad access to a user's browser data and is not constrained in the SKILL.md—this is a proportionality and scope concern users should understand before enabling it.
评估建议
This skill is coherent for web scraping Xiaohongshu, but it requires you to run Chrome with remote debugging and to use a logged-in browser session. Opening a remote-debugging port and letting an agent control an already-authenticated browser can expose cookies, other site data, and private pages. Before installing or using it: 1) Only run the skill against a dedicated Chrome profile or a disposable browser instance (not your daily browser). 2) Avoid using a profile that has other site logins or...详细分析 ▾
ℹ 用途与能力
Name/description (search public Xiaohongshu notes and extract metadata) match the actions in SKILL.md (navigate search pages, extract title/content/tags/likes). Requiring browser automation to load and scrape pages is appropriate. The only mismatch is emphasis on an "already-logged-in Chrome"—searching public notes usually doesn't strictly require a logged-in account, so the instruction to use the user's logged-in session is not fully justified by the stated purpose.
⚠ 指令范围
SKILL.md instructs the agent to control a Chrome instance via remote debugging (open pages, click, snapshot, evaluate arbitrary JS in page context). Those actions will allow reading any content visible to that browser (including other sites, cookies, or private pages) and capturing full page snapshots; the instructions do not limit scraping to only public fields nor mention sanitization or explicit exclusion of private data. This broad access is a scope creep/risk relative to the claimed function of extracting public notes.
✓ 安装机制
Instruction-only skill with no install spec and no code files. No packages or external downloads are requested, which minimizes installation risk.
ℹ 凭证需求
The skill requests no environment variables or credentials, which is proportional. However, its operational precondition—connecting to Chrome started with --remote-debugging-port and using an 'already-logged-in' profile—is effectively a request for powerful runtime access to the user's browser data. That capability is not expressed as an environment variable but is functionally equivalent to requesting privileged access and is not justified or constrained in the document.
✓ 持久化与权限
always: false and normal autonomous invocation defaults. The skill does not request permanent presence or system-wide config changes in the SKILL.md.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/3/24
xiaohongshu-search 1.0.0 - 首次发布小红书内容搜索工具，支持通过已登录 Chrome 自动化搜索并采集公开笔记内容。 - 支持提取笔记标题、作者、正文、话题标签、点赞数等信息。 - 可结合市场调研需求分析消费趋势，并输出报告格式。 - 兼容 browser 工具操作，详细说明了使用流程及输出结构。
● 无害
安装命令
点击复制官方npx clawhub@latest install xiaohongshu-search-cn
镜像加速npx clawhub@latest install xiaohongshu-search-cn --registry https://cn.longxiaskill.com镜像同步中