Install
$ agentstack add skill-deliciousbuding-xiaohongshu-skill-xiaohongshu-skill ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
小红书 Skill
通过 JSON CLI 操作小红书浏览器会话。执行入口统一为:
cd {baseDir}
uv run python -m scripts
安全规则
发布、评论、回复、点赞、收藏、取消点赞和取消收藏会改变真实账号状态。执行前必须:
- 展示目标账号、内容、媒体和操作类型。
- 获得用户明确确认。
- 只执行用户确认的单次操作。
遇到验证码、登录页或安全验证页时停止。不要自动绕过验证,不要运行批量抓取或批量互动。
任务路由
| 用户目标 | 命令或参考 | | --- | --- | | 首次登录或重新登录 | qrcode --headless=false | | 检查登录 | check-login | | 管理多个账号 | --profile ;详见 docs/INSTALL.md | | 搜索笔记 | search | | 读取笔记详情 | feed | | 读取用户主页 | user 或 me | | 获取推荐流 | explore | | 准备或发布图文 | publish | | 准备或发布视频 | publish-video | | Markdown 转图片发布 | publish-md | | 准备或发布长文 | publish-longform | | 评论和回复 | comment、reply、reply-notification | | 点赞和收藏 | like、collect、unlike、uncollect | | 模板、策略和 SOP | template、strategy-*、sop | | 查看参数 | python -m scripts --help |
完整命令见 docs/API.md;安装和平台接入见 docs/INSTALL.md、docs/INTEGRATIONS.md。
初始化
cd {baseDir}
uv sync --frozen --no-dev
uv run playwright install chromium
uv run python -m scripts qrcode --headless=false
开发者使用:
uv sync --frozen --group dev
uv run python -m scripts.quality check
只读示例
uv run python -m scripts search "咖啡" --limit=5
uv run python -m scripts feed
uv run python -m scripts explore --limit=10
feed_id、user_id 和 xsec_token 必须来自当前会话的结果,不要长期缓存。
发布语义
发布命令默认填写表单并返回 ready。用户确认后才能追加 --auto-publish。
自动提交可能返回:
confirmed:已观察到可信成功信号。submitted_unconfirmed:已点击提交但未确认成功;必须人工复核,禁止自动重试。failed:提交失败或出现登录、验证码、安全验证等失败信号。
输出和错误
标准输出是 JSON;诊断信息写入标准错误。Agent 应先读取 status,再依据 scripts/output_contracts.py 中的契约处理字段。
发生 captcha_required 或浏览器安全验证时,不要重试循环。切换到有头模式并由用户处理。
本地状态
每个 profile 独立保存浏览器状态、Cookie 备份和会话元数据。不要读取、展示、提交或外发这些文件。XHS_FP_SEED 只用于显式覆盖当前进程的稳定指纹 seed。
安全和隐私规则见 docs/SECURITY.md。架构说明见 docs/ARCHITECTURE.md。
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: DeliciousBuding
- Source: DeliciousBuding/xiaohongshu-skill
- License: Apache-2.0
- Homepage: https://deliciousbuding.github.io/xiaohongshu-skill/
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.