xiaohongshu-lowtop

Warn

Audited by Socket on Jun 12, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

该技能的核心用途与抓取/分析小红书数据基本一致,外部依赖面较小,未见明显恶意下载执行链。但它要求扫描本地 shell/profile 文件读取 API Key,并具备自动推送与附件发送能力,权限和数据接触范围高于普通查询型技能。整体更像可疑而非恶意:用途基本匹配,但凭据获取方式和自动化动作需要谨慎。

Confidence: 100%Severity: 60%
Audit Metadata
Analyzed At
Jun 12, 2026, 07:52 PM
Package URL
pkg:socket/skills-sh/redfox-data%2Fredfox-community%2Fxiaohongshu-lowtop%2F@656c7719cd839316fb970b5822a4a5a9134f4253e96b5c1e4c7a8b2bcee881b5
Security Audit — socket — xiaohongshu-lowtop