codingsamss/xiaohongshu-session-reader
platforms/hermes/skills/social-media/xiaohongshu-session-reader/SKILL.md
Use this skill to read Xiaohongshu (小红书) via HTTP/API first with local logged-in Chrome cookies, and only use Playwright as fallback. Supports profile card extraction, note detail extraction, and conditional comment fallback when API is blocked.
$ install --global
skillsauthnpx skillsauth add codingsamss/ai-dotfiles xiaohongshu-session-readerInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 18, 2026, 8:21 AM20.7s5 files scanned
SKILL.md
- name:
- xiaohongshu-session-reader
- description:
- Use this skill to read Xiaohongshu (小红书) via HTTP/API first with local logged-in Chrome cookies, and only use Playwright as fallback. Supports profile card extraction, note detail extraction, and conditional comment fallback when API is blocked.
Xiaohongshu Session Reader
Scope
- Reuse local Chrome logged-in session only.
- Prefer HTTP/API extraction for stability and speed.
- Use Playwright only when HTTP/API path is blocked (captcha / risk control).
- Support:
- profile card titles (for 谁是卧底词组 collection)
- note detail (title/desc/author)
- comments when API permits; otherwise explicit fallback signal
- Do not forge identity, bypass captcha, or brute-force anti-bot checks.
Prerequisite Check
Before extraction:
python3 --version
Fallback-only prerequisite:
codex mcp get playwright-ext
Workflow
- Run HTTP-first reader:
python3 <skill_dir>/scripts/xhs_http_reader.py \
--url "<xhslink_or_xiaohongshu_url>" \
--mode auto \
--max-items 40 \
--max-comments 20 \
--pretty
- If response has
fallback.required=false, use returned data directly. - If response has
fallback.required=true, switch to Playwright fallback:- profile: open profile page and read visible card titles.
- note comments: open note detail and read comments from DOM snapshot.
- Normalize four-word groups with
scripts/undercover_parser.py. - Persist progress in
.cache/xhs_undercover_progress.jsonfor batch tasks.
Block Handling Rules
- If HTTP returns captcha or risk code (for example
300011), do not keep retrying aggressively. - Degrade once to Playwright fallback and continue extraction.
- If Playwright also lands on captcha/login gate, request user to refresh local login session.
- Never claim detail/comments were obtained via HTTP when response marks fallback required.
Output Contract
Use this structure:
{
"source": "<xhs link>",
"captured_at": "YYYY-MM-DD",
"groups": [
{ "id": 1, "words": ["词A", "词B", "词B", "词B"], "odd": "词A" }
]
}
If confidence is low, add note for manual verification.
Resources
- HTTP-first reader:
scripts/xhs_http_reader.py - Cookie exporter (fallback tooling):
scripts/export_xhs_cookies.py - DOM fallback reference:
references/extraction-checklist.md - Group parser:
scripts/undercover_parser.py
Related Skills
codingsamss/mx-message-query
development
VerifiedTrustedCommunity
Query Midea MX / 美信 local message cache through the MX local HTTP query service from Codex. Use when the user asks to read MX sessions, search chat history, search messages globally or inside a group/session, list recent messages, or page message history. This is read-only and does not require send authorization. Never fall back to reading SQLite or app cache files directly.
8SKILL.mdUpdated Jun 5, 2026
codingsamss/mx-im
development
VerifiedTrustedCommunity
Safely search MX users or groups and send Midea MX / 美信 IM messages from Codex. Use when the user asks to notify someone, send a message to a person or group, use a configured group alias, @ users, @ all, or send MX file/image messages. Read lookups need no extra authorization; every live send needs explicit user authorization for that exact target and message.
8SKILL.mdUpdated Jun 5, 2026
codingsamss/mx-channel-rules
tools
VerifiedTrustedCommunity
MX channel output rules. Always active in MX conversations.
8SKILL.mdUpdated Jun 5, 2026
codingsamss/workspace-cli-bridge
tools
VerifiedTrustedCommunity
Use the company WorkSpace `ws` CLI reliably as a delegated coding agent from Codex. Trigger when the user wants Codex to command `ws`, WorkSpace CLI, or the company opencode-derived coding tool to generate code, inspect a repo, run a bounded implementation task, or use a requested WorkSpace model while Codex reviews the output.
8SKILL.mdUpdated Jun 4, 2026