xiaohongshu-ops

SUSPICIOUS. The skill's stated purpose is coherent, but its core functionality depends on installing a third-party skill and potentially forwarding API keys/browser cookies into that transitive dependency. The present document is mostly operational guidance, not malware, yet the install-trust and credential-routing footprint is broader than a simple content-ops guide and creates meaningful security risk.