Skill

sn-search-social-cn

skill:opensensenova/sensenova-skills#sn-search-social-cn

用于搜索中文社交平台。脚本入口覆盖 B站视频、知乎问答和抖音视频；小红书、微博当前没有脚本入口，只能通过 browser-use / 公开网页兜底。

SkillsMP

Verdict

Suspicious

Risky behavior the analysis could not rule out.

Analyzed Oct 27, 2026, 23:31 UTC at 0ee34f3

findings

high

highest severity

threat classes

670

files scanned

109/109

checks satisfied

package advisories

Why this verdict

suspicious: finding skill:skills/sn-search-social-cn:skills/sn-search-social-cn/requirements.txt:1:SUPPLY

Security findings 1

Supply chain

highContextual riskmedium confidence

The skill's requirements.txt declares the `xhs` PyPI dependency with no version pin even though SKILL.md says Xiaohongshu has no script entry and XHS_COOKIE is never read, so a documented `pip install -r requirements.txt` setup fetches unversioned third-party code beyond the skill's declared functionality.

skills/sn-search-social-cn/requirements.txt:1-2

httpx>=0.27

conceal:remotevector:codevector:instructionvector:metadata

Counter-argument considered

The skill instructs the agent to run `pip install -r requirements.txt`, which fetches the unpinned `xhs` package, while the declared description and cookie section state Xiaohongshu has no script entry, making this unversioned third-party fetch undeclared and outside the pinned-registry carve-out; the 'do not auto-install inside scripts' note does not neutralize it.

Open questions 4

What the analysis could not settle from the code alone.

No shown script imports the `xhs` package even though requirements.txt installs it unpinned; is `xhs` used by any other file shipped in this skill, or is it an unused unpinned dependency?

Supply chain

[file request .env.example] Which environment variables, endpoints, or URLs does the repo-root .env.example referenced by SKILL.md define — only BILIBILI_COOKIE, ZHIHU_COOKIE, DOUYIN_COOKIE, or additional entries?

Credential access

[file request skills/sn-search-social-cn] Where, if anywhere, does this artifact's own code import or invoke the `xhs` package declared in requirements.txt, given SKILL.md states Xiaohongshu has no script entry and XHS_COOKIE is not read?

Supply chain

[file request skills/sn-search-social-cn/.env.example] Does .env.example define only the expected platform credential variables (BILIBILI_COOKIE, ZHIHU_COOKIE, DOUYIN_COOKIE), or does it also define any additional endpoints, URLs, or variables?

Credential access