xiaohongshu-account-analyzer

SUSPICIOUS: the skill's purpose and capabilities are mostly coherent, and it does not install unverified code or request disproportionate access. However, all account data and authentication flow through a third-party domain with limited independently verifiable trust evidence, making the data-flow and credential-forwarding model riskier than a direct official API integration.