The Agent Skills Directory

[SAFE]: The skill implements a structured workflow for fetching Xiaohongshu viral note data via the RedFox API (redfox.hk). All network operations are directed at the official vendor infrastructure associated with the skill's stated purpose.
[SAFE]: Credential management follows best practices. The skill avoids hardcoded secrets, instead retrieving the REDFOX_API_KEY from environment variables or shell configuration files, and provides clear instructions for users to set these up securely.
[SAFE]: External dependencies are restricted to the standard requests library for Python and well-known, trusted CDNs (cdnjs) for frontend assets (html2canvas, jspdf) used in the HTML report generator.
[SAFE]: Data processing is localized. Scripts like gen_xhs_html.py operate on cached JSON data fetched by xhs_weekly_fetcher.py, minimizing redundant network calls and ensuring data consistency between terminal output and visual reports.
[SAFE]: Command execution is limited to internal script orchestration for data fetching and report generation. There are no signs of privilege escalation, persistence mechanisms, or unauthorized file system access.

xiaohongshu-weeklytop