The Agent Skills Directory

[CREDENTIALS_UNSAFE]: The script 'scripts/legacy/extract_chrome_cookies.py' attempts to retrieve the Chrome Safe Storage password from the macOS Keychain using the 'security find-generic-password' command. This is used to decrypt browser cookies for session hijacking.
[CREDENTIALS_UNSAFE]: The skill accesses the Chrome browser's internal cookie database file located at '~/Library/Application Support/Google/Chrome/Default/Cookies' to harvest sensitive user session data.
[EXTERNAL_DOWNLOADS]: The skill performs unverified package installations at runtime. Specifically, 'scripts/legacy/extract_chrome_cookies.py' executes 'pip install browser-cookie3' and 'scripts/xhs-api-service.sh' executes 'pip install -r requirements.txt'.
[COMMAND_EXECUTION]: The skill makes extensive use of the 'subprocess' module to execute system-level commands, including managing a local API service and running dynamically generated Swift scripts for OCR processing.
[COMMAND_EXECUTION]: Several scripts in the 'scripts/legacy/' directory use 'subprocess.run' to interact with system tools and shell commands, increasing the attack surface for command injection if user-supplied URLs are not properly sanitized.

xiaohongshu-scraper