Trust Assessment
xiaohongshu-mcp received a trust score of 79/100, placing it in the Mostly Trusted category. This skill has passed most security checks with only minor considerations noted.
SkillShield's automated analysis identified 2 findings: 0 critical, 1 high, 1 medium, and 0 low severity. Key findings include Suspicious import: requests, Reliance on external, unverified binaries for core functionality.
The analysis covered 4 layers: Manifest Analysis, Static Code Analysis, Dependency Graph, LLM Behavioral Safety. All layers scored 70 or above, reflecting consistent security practices.
Last analyzed on February 13, 2026 (commit 13146e6a). SkillShield performs automated 4-layer security analysis on AI skills and MCP servers.
Layer Breakdown
Behavioral Risk Signals
Security Findings2
| Severity | Finding | Layer | Location | |
|---|---|---|---|---|
| HIGH | Reliance on external, unverified binaries for core functionality The skill's setup instructions explicitly direct the user to download and execute binaries (`xiaohongshu-mcp` and `xiaohongshu-login`) from an external GitHub repository (https://github.com/xpzouying/xiaohongshu-mcp). These binaries are not part of the skill package itself, and their integrity (e.g., authenticity, lack of malware) cannot be verified by the skill. Running unverified third-party executables poses a significant supply chain risk, as a compromised repository, malicious release, or even a legitimate but vulnerable binary could lead to system compromise or data exfiltration on the user's machine. The skill's core functionality is entirely dependent on these external components. Recommend using a containerized environment (e.g., Docker) for the external `xiaohongshu-mcp` server to isolate it from the host system. Alternatively, provide cryptographic checksums (e.g., SHA256) for the recommended binaries, ideally signed by a trusted party, to allow users to verify their integrity before execution. Clearly state the risks associated with running third-party executables. | LLM | SKILL.md:13 | |
| MEDIUM | Suspicious import: requests Import of 'requests' detected. This module provides network or low-level system access. Verify this import is necessary. Network and system modules in skill code may indicate data exfiltration. | Static | skills/borye/xiaohongshu-mcp/scripts/xhs_client.py:25 |
Scan History
Embed Code
[](https://skillshield.io/report/8f613a2b4b3aa37b)
Powered by SkillShield