xhs-content-ops
小红书复合内容运营技能。组合搜索、详情、发布、互动等能力完成运营工作流。 当用户要求竞品分析、热点追踪、内容创作、互动管理等复合任务时触发。
79%
Does it follow best practices?
Run evals on this skill
Adds up to 20 points to the overall score
High
Do not use without reviewing
Fix and improve this skill with Tessl
tessl review fix ./skills/xhs-content-ops/SKILL.mdW007: Insecure credential handling detected in skill instructions.
What this means
The skill handles credentials insecurely by requiring the agent to include secret values verbatim in its generated output. This exposes credentials in the agent’s context and conversation history, creating a risk of data exfiltration.
Why it was flagged
The skill instructs the agent to include an XSEC_TOKEN value directly as a command-line argument (e.g., `--xsec-token XSEC_TOKEN`) in generated commands, which requires the model to handle/output secret tokens verbatim and poses an exfiltration risk.
W011: Third-party content exposure detected (indirect prompt injection risk).
What this means
The skill exposes the agent to untrusted, user-generated content from public third-party sources, creating a risk of indirect prompt injection. This includes browsing arbitrary URLs, reading social media posts or forum comments, and analyzing content from unknown websites.
Why it was flagged
在“小红书复合内容运营”的运行路径中，工作流会先执行 `python scripts/cli.py search-feeds` 获取笔记列表并随后直接调用 `get-feed-detail` 读取所选笔记详情和评论，其中包含用户/外部作者撰写的自由文本，从而构成间接提示注入暴露。
- Repository
autoclaw-cc/xiaohongshu-skills
- Revision
b043748
- Audited
- Security analysis
Is this your skill?
If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.