xiaohongshu-scraper

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 0.90). Contains deliberate credential-extraction functionality (Chrome cookie extraction/decryption and persistent saving + reuse for authenticated requests), enabling session theft/session reuse — a high-risk abuse capability; no hidden remote backdoor, external exfiltration to unknown hosts, obfuscated payloads, or reverse-shell patterns were found.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). 该技能在运行时会通过 xhs_scraper.py 调用本地 API（curl POST http://127.0.0.1:5556/xhs/detail），而 API 服务会抓取小红书笔记页面/内容并将其“作品描述/正文”等字段作为可读文本返回给脚本，再被写入 note.md/note.json 并作为结构化数据进入后续上下文；该文本来源于外部网站（小红书）而非用户自写。