xiaohongshu-crawler
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installs the
@alipay/agent-paymentpackage from the official NPM registry to handle payment flows. This is a well-known service provided by Alipay for agent-based transactions.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes content crawled from Xiaohongshu, which constitutes an external data ingestion surface. As with any search tool, content retrieved from external sources could contain embedded prompts intended to influence agent behavior.\n - Ingestion points: Data is retrieved from the Redfox API at redfox.hk and passed to the agent as JSON.\n
- Boundary markers: The skill uses markdown tables to delimit results, but does not provide explicit instructions to the agent to disregard instructions within the data.\n
- Capability inventory: Includes execution of local scripts (crawl_xhs.py, generate_report.py), file writing to the user's Downloads folder, and interaction with the alipay-bot CLI.\n
- Sanitization: The skill relies on the agent's default safety filters and the structured display format to mitigate potential injection risks.
Audit Metadata