xiaohongshu-scraper

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). The codebase contains explicit credential-theft functionality (Chrome cookie extraction/decryption and saving of cookie strings) and tooling to reuse those cookies to access private content, enabling impersonation and unauthorized data scraping.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). 运行时会对用户提供的“笔记URL/短链接”发起网络请求抓取小红书页面/接口返回的正文与标题等可读文本，并在 API 响应中把这些内容（含作者/描述/标签等）返回给 xhs_scraper.py 再写入 note.md/note.json；该文本属于外部网站（小红书）内容，属于“公共网页/运行时抓取内容”路径。