xiaohongshu-search

SUSPICIOUS: the skill’s purpose broadly matches its capabilities, and its local Node execution is ordinary, but the core data flow depends on a non-official third-party intermediary (Guaikei) that receives both token and search data. The main risk is credential/query forwarding and weak transparency around the actual API path, not confirmed malware.