xiaohongshu-crawler@1.0.1
CAUTIONPublisher claims: "小红书作品爬取工具。根据关键词爬取小红书热门作品数据，支持按日期范围、排序方式筛选，结果以结构化表格展示。当用户需要爬取小红书作品、查询小红书热门内容、搜索小红书爆款笔记时使用。触发词：小红书爬取、小红书作品、小红书爆款、小红书搜索、小红书热门、小红书笔记查询。当接口返回积分不足（code=3210）时，自动唤起支付宝完成充值后继续查询。" Observed in sandbox: no network, touches nothing outside the project, writes no memory.
Registry ClawHubPublisher redfox-data · joined 2 days agoInstalls 780Last detonated 29 h ago
Behavior trace
Honeypot run · 0 s · 1 scenarios · 0 deviationst+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only
Static findings
HIGH
Hidden zero-width characters detectedSKILL.md:168 · Hidden zero-width characters detected — may conceal content
AST07HIGH
Hidden zero-width characters detectedSKILL.md:139 · Hidden zero-width characters detected — may conceal content
AST07HIGH
npx invocation of non-well-known packagereferences/alipay-recharge.md:62 · npx invocation of non-well-known package — may execute untrusted code
AST06HIGH
URL with embedded credentialsassets/report_template.html:7 · URL with embedded credentials — may be phishing or credential leaking
AST07HIGH
npx invocation of non-well-known packagereferences/alipay-recharge.md:111 · npx invocation of non-well-known package — may execute untrusted code
AST06MEDIUM
File type combined with upload actionscripts/generate_report.py:5 · File type combined with upload action — agent may exfiltrate local data files
AST07