Is xhs-dpt@1.0.0 safe to install?

xhs-dpt@1.0.0

VERIFIED

Publisher claims: "小红书笔记互动数采集工具（社媒指数）。当用户需要采集/查询小红书笔记的点赞数、收藏数、评论数、转发（分享）数等互动指标，提交一批笔记链接一键批量采集、导出采集结果 CSV（Excel 直开），或提到"小红书采集/互动数采集/社媒指数/笔记互动数据/数据采集"时使用本 skill。适合小红书投放结案、互动数统计、活动效果监测、爆款内容分析、KOL 分析等场景。**笔记链接必须带 xsec_token 参数**（缺 token 请先用转链 skill xhs-convert-url-pro 转换）。也可使用小红书评论采集（xhs-comment）skill进行评论采集。收费服务（1 篇笔记 = 1 点数，注册送 10 点）。" Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher mystery77777777 · joined 4 days agoInstalls 260Last detonated 2d ago

$clawhub install xhs-dpt

Watch Report an issue

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario) on 2026-10-30 and scored it 82/100 (Verified). It did what it claims and nothing else we could detect: no undeclared network egress, no credential reads, no persistent instruction writes. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations

t+CategoryObserved action

0.0sprocessno install scripts in bundle

0.0sprocessscript backend runs setup only

Static findings

HIGH

Outbound HTTP to raw IP addressSKILL.md:188 · Outbound HTTP to raw IP address — may bypass domain-based monitoringFix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.

AST07

MEDIUM

URL using raw IP addressSKILL.md:188 · URL using raw IP address — may bypass domain-based filteringFix: Replace encoded or assembled strings with plain literals and remove undeclared network calls.

AST07

MEDIUM

File permission modification commandsrc/config.js:49 · File permission modification command — agent changes file ownership/permissionsFix: Request the narrowest permission that works; replace wildcards with the exact paths or hosts.

AST05

MEDIUM

File permission modification commandsrc/config.js:29 · File permission modification command — agent changes file ownership/permissionsFix: Request the narrowest permission that works; replace wildcards with the exact paths or hosts.

AST05