xiaohongshu-account-research
Pass
Audited by Gen Agent Trust Hub on May 11, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill performs research and data aggregation tasks exclusively through official PostPlus infrastructure. No malicious patterns, obfuscation, or safety bypass attempts were detected.\n- [EXTERNAL_DOWNLOADS]: Utilizes the
yt-dlptool (called viapython3) to download media files from manifest-defined URLs. This behavior is documented and expected for the skill's research capabilities.\n- [COMMAND_EXECUTION]: Useschild_process.spawnto run thepostplusCLI for billing confirmations and Python for media handling. These calls use specific binaries and provide proper argument handling. It also provides shell-escaped commands for users to resume collection tasks manually.\n- [DATA_EXFILTRATION]: Accesses the PostPlus CLI configuration file (e.g., in~/.config/postplus/) to retrieve session tokens required for API authentication. This data is transmitted only to the vendor's authorized API endpoints to perform requested scraping operations.
Audit Metadata