The Agent Skills Directory

[COMMAND_EXECUTION]: The skill interacts with the sau CLI tool to perform account management and content uploads. The provided Python template uses subprocess.run with argument lists and shlex.quote, which is a secure practice to prevent shell injection vulnerabilities.
[EXTERNAL_DOWNLOADS]: The documentation suggests installing dependencies via uv and downloading browser binaries for patchright. It recommends using a well-known mirror (npmmirror.com) for Playwright downloads, which is standard practice in certain network environments.
[DATA_EXFILTRATION]: While the skill manages authentication cookies for Xiaohongshu, there is no evidence of these cookies being transmitted to unauthorized external endpoints. The workflow focuses on local storage and user-interactive login via QR codes.

xiaohongshu-upload