xiaohongshu-media-collector
Pass
Audited by Gen Agent Trust Hub on May 10, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements its functionality using standard Node.js APIs with appropriate input validation and sanitization.
- [EXTERNAL_DOWNLOADS]: Fetches image assets from remote URLs specified in input manifests, which is the primary purpose of the tool.
- [COMMAND_EXECUTION]: Uses local scripts for building manifests and downloading assets. These operations are restricted to the local filesystem and use path resolution to maintain integrity.
- [SAFE]: Filenames derived from remote URLs or IDs are sanitized to remove non-alphanumeric characters, preventing potential injection or path traversal issues.
Audit Metadata