xiaohongshu-prohibited-word

SUSPICIOUS. 核心违禁词检测功能与文档/网页提取总体一致，但 skill 额外引入自动支付宝充值与最新版本 npx 安装，扩大了执行与现实世界操作范围；同时支持自定义 API 端点并读取 shell 配置中的密钥，带来中等偏高的数据流与凭证风险。未见明确恶意或隐蔽窃密证据，但整体权限与工作流已超出单纯“违禁词检测”所需。

This is a text-extraction and sensitive-word checking CLI that sends user content and a REDFOX_API_KEY to https://redfox[.]hk/story/api/cozeSkill/sensitiveWordSearch. Its main security concern is SSRF potential because --url is fetched by Chromium and urllib without restricting internal destinations; API-provided HTML may also be unsafe if rendered downstream. It reads the API key from environment variables or shell startup files and prints payment instructions based on API responses, including a cashier URL and alipay-bot steps, but does not itself execute payment. Overall severity is moderate and driven primarily by the unrestricted URL fetching and credential transmission to the configured service.