xhs-suggest-keywords
Pass
Audited by Gen Agent Trust Hub on Aug 8, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses Playwright to launch a Chromium browser instance for web automation. This is consistent with its stated purpose of collecting search suggestions through browser interaction.
- [EXTERNAL_DOWNLOADS]: The instructions include standard commands to install the 'playwright' package and the Chromium browser binary using npm and npx. These are legitimate dependencies for the tool's functionality.
- [DATA_EXFILTRATION]: The skill interacts with 'xiaohongshu.com' to fetch public search suggestions. It does not access sensitive local files, credentials, or environment variables.
Audit Metadata