github analyzed cf7560c

blbl147/xhs-mcp

搜索笔记、浏览首页推荐、查看笔记内容与评论，并发表你的评论。直接在工作流中与小红书内容互动，高效跟进话题。

maintainer: blbl147
licence: —
first seen: 2026-06-03
last seen: 2026-06-03
releases · 30d: 0
short id

Drift inferred · capture-to-capture

No drift recorded — single capability capture; advisories appear once its surface changes.

capabilities 6 tools

transport stdio counts 6 tools · 0 res · 0 prompts permission surface via code analysis

tools

check_cookie
get_note_comments
get_note_content
home_feed
post_comment
search_notes

skills & danger signals github-tarball

prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed commit cf7560c · analyzer v33 · 4w ago

danger signals1

dynamic code execution eval() blbl147-xhs-mcp-cf7560c/api/xhsvm.js :2470 eval(`try {

code evidence vHEAD · github-tarball

evidence-backed findings quoted directly from the published source artifact — not inferred

code files: 3

tool registrations 6

check_cookie blbl147-xhs-mcp-cf7560c/main.py :47
home_feed blbl147-xhs-mcp-cf7560c/main.py :65
search_notes blbl147-xhs-mcp-cf7560c/main.py :87
get_note_content blbl147-xhs-mcp-cf7560c/main.py :114
get_note_comments blbl147-xhs-mcp-cf7560c/main.py :160
post_comment blbl147-xhs-mcp-cf7560c/main.py :190