xiaohongshu-mcp-integration

The skill is purpose-aligned and not overtly malicious, but it carries medium-high security risk because it installs/runs external binaries and enables autonomous public actions on a social platform. Data flows appear consistent with Xiaohongshu automation rather than credential theft, but account session handling plus automated posting/commenting make it risky enough to classify as suspicious rather than benign.