Is iamzifei/xiaohongshu-images-skill safe?
Yes. iamzifei/xiaohongshu-images-skill is safe to install. Oathe's behavioral security audit gave the xiaohongshu-images-skill skill by iamzifei a trust score of 92/100 with 3 findings, none critical or high.
https://github.com/iamzifei/xiaohongshu-images-skill
Is iamzifei/xiaohongshu-images-skill safe to install?
This is a legitimate skill for transforming content into styled images for Xiaohongshu social media platform. The skill includes well-documented functionality, professional code quality, and operates within its stated scope. The main concerns are the inclusion of executable Python code and dependency on an external skill, but both appear to serve legitimate purposes.
What security issues were found in iamzifei/xiaohongshu-images-skill?
Category Scores
Findings (3)
MEDIUM Executable Python script included -10 ▶
The skill includes scripts/screenshot.py, an executable Python script using Playwright for browser automation. While the code appears legitimate for taking screenshots, executable scripts present potential security risks.
LOW External skill dependency -15 ▶
The skill declares a dependency on /baoyu-cover-image skill for generating cover images. This external dependency could potentially be a security vector if the dependent skill is compromised.
INFO Accesses user directories -5 ▶
The skill is designed to work with files in ~/Dev/obsidian/ directories and create output files in specific folder structures. This is clearly documented as part of its intended functionality.
Should I install iamzifei/xiaohongshu-images-skill?
Oathe's verdict for iamzifei/xiaohongshu-images-skill is SAFE with a trust score of 92/100. Recommendation: Install.