xiaohongshu-ingest

This module appears to be a legitimate scraper/transcriber without obvious overt malware behaviors (no backdoor/persistence/exfiltration logic observed). The main security concerns are (1) elevated supply-chain/remote code execution risk from FunASR being loaded with trust_remote_code=True, and (2) increased attack surface from downloading attacker-influenced media URLs extracted from a remote page and processing them via ffmpeg. Cookie usage (XHS_COOKIE) is forwarded to media URLs derived from remote content without host allowlisting/verification, which raises privacy/scope risk. Overall: not clear malware, but materially risky to run in untrusted environments without supply-chain controls and domain/host restrictions.