xiaohongshu-crawler

SUSPICIOUS: the skill’s stated purpose is coherent, but its actual data flow routes all queries and credentials through an unverified third-party service (doubaoya.com) instead of official Xiaohongshu infrastructure. No malware or download-execute behavior is shown, yet the intermediary credential routing and weak provenance make the skill medium-high risk.