xhs-note-creator
Warn
Audited by Gen Agent Trust Hub on May 18, 2026
Risk Level: MEDIUMCREDENTIALS_UNSAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [CREDENTIALS_UNSAFE]: The skill requires and manages Little Red Book session cookies (
XHS_COOKIE), which are high-value credentials providing full account access. Instructions suggest storing these in.envor markdown files within the workspace. - [CREDENTIALS_UNSAFE]: The script
scripts/comment_manager.pyattempts to read credentials from the hardcoded path~/.openclaw/workspace/memory/xhs-cookie.mdusing regular expressions to extract JSON content. - [COMMAND_EXECUTION]: The workflow relies on executing multiple Python and Node.js scripts that interact with the network and local filesystem to render images and publish posts. This includes a hidden capability for automated comment monitoring and replying.
- [EXTERNAL_DOWNLOADS]: Setup instructions include the command
playwright install chromium, which downloads browser binaries from remote servers to the local system.
Audit Metadata