Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add redfox-data/redfox-community-dsh --skill xiaohongshu-prohibited-wordgit clone --depth 1 https://github.com/redfox-data/redfox-community-dshWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/redfox-data/redfox-community-dsh/xiaohongshu-prohibited-word)<a href="https://agentmods.dev/skills/redfox-data/redfox-community-dsh/xiaohongshu-prohibited-word"><img src="https://agentmods.dev/badge/skills/redfox-data/redfox-community-dsh/xiaohongshu-prohibited-word/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/redfox-data/redfox-community-dsh/xiaohongshu-prohibited-word"><img src="https://agentmods.dev/badge/skills/redfox-data/redfox-community-dsh/xiaohongshu-prohibited-word.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00086 | $0.03110 |
| Opus 5 | $0.00043 | $0.01555 |
| Sonnet 5 | $0.00017 | $0.00622 |
| Haiku 4.5 | $0.00009 | $0.00311 |
Grade A, and why
xiaohongshu-prohibited-word scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 8d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
│ ├── _http_request() # HTTP 请求（urllib 原生，内置重试） How it starts
The opening of the file, as written. The whole thing — 267 lines — stays where its author put it; the contents beside it link to each section on GitHub.
小红书违禁词查询
简介
小红书违禁词查询是一款专为小红书内容创作者、品牌运营和营销人员设计的智能违禁词检测工具，基于 红狐Hub 违禁词检测 API，在笔记发布前快速扫描文案中的敏感词并提供上下文智能替换建议。
通过简单的文案输入，你可以：
- 🔍 违禁词标记 —— 原文中命中词用加粗标出，一眼看到风险点
- 💡 替换建议 —— 每个违禁词配一个结合上下文的替换词 + 更换理由
- ✏️ 优化文案 —— 直接给出一份替换后的可发布版本，复制粘贴就能用
- 📏 长文案分批检测 —— 超过 3000 字自动提醒，支持分批检测后合并结果
触发关键词：小红书违禁词 笔记敏感词 小红书审核 限流词 种草文案合规
功能特性
🎯 核心功能
| 输入方式 | 能力说明 | 使用示例 |
|---|---|---|
| 💬 直接贴文案 | 粘贴笔记文案，一键检测 | 帮我看下这段笔记有没有违禁词：这款美白神器真的太有效了…… |
| 📎 上传文件 | 支持 TXT、DOC、DOCX，自动读取检测 | 直接上传文档，无需手动复制 |
| 🖼️ 上传图片 | 自动提取图中文字进行检测 | 上传笔记截图/海报即可 |
| 🌐 粘贴链接 | 自动抓取网页内容检测 | 帮我检测这个网页：https://example.com/article |
✨ 特色亮点
- ⚡ 一站式检测 —— 文本/文件/图片/网页四种输入方式，一次调用完成所有检测
- 🔗 跨平台内容提取 —— 内置 Playwright 无头浏览器，支持 JS 动态渲染的 SPA 页面内容提取
- 🌐 英文误匹配过滤 —— 自动识别英文单词内部子串误判（如 "Glasswing" 中的 "ass"），无需手动排查
- 🔒 数据安全 —— 检测内容通过加密 HTTPS 发送，不在本地存储
- 📄 一键导出 —— 自动生成纯文本优化文案文件并以卡片形式发送，可直接下载使用
限制说明：平台固定为小红书，无需指定。PDF 不支持，需转为图片或文本文件后上传。
一键安装
前置条件
- Python 3.8+
- 安装 Python 依赖：
pip install python-docx==1.1.0 beautifulsoup4==4.12.3 playwright==1.58.0 - 安装 Chromium 浏览器：
playwright install chromium
获取 API Key
配置 API Key
脚本按以下优先级自动获取密钥：
| 优先级 | 来源 | 说明 |
|---|---|---|
| 1 | 环境变量 REDFOX_API_KEY |
直接读取当前设备环境变量 |
| 2 | Shell 配置文件 | 自动扫描 ~/.zshrc ~/.bashrc ~/.bash_profile ~/.profile ~/.zprofile |
| 3 | 提示配置 | 以上均未找到时，提示用户手动配置 |
配置示例：
export REDFOX_API_KEY=ak_xxxxxxxx
环境变量参考
| 变量名 | 必填 | 说明 |
|---|---|---|
REDFOX_API_KEY |
是 | 红狐Hub API 访问密钥，格式 ak_xxxxxxxx |
XHS_SENSITIVE_WORD_API_URL |
否 | 自定义 API 端点地址（默认使用 红狐Hub 官方） |
XHS_SENSITIVE_WORD_VERIFY_SSL |
否 | SSL 证书校验开关，默认 1（开启） |
使用指南
基础使用
💬 直接贴文案 —— 把笔记文案发给助手即可检测
用户：帮我看下这段笔记有没有违禁词：这款美白神器真的太有效了，用了三天就白了一个度
助手输出：🔍 违禁词检测结果 → 💡 修改建议 → ✏️ 优化文案 + 纯文本文件卡片
What ships with it
5 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 8d ago First seen · 267 lines · 86 tokens per session scan A 8800604d197e
xiaohongshu-prohibited-word is a skill published in the GitHub repository redfox-data/redfox-community-dsh (6 stars, last pushed yesterday), licensed MIT. It adds 86 tokens to every session and 3,110 once invoked, about $0.0004 per session on Opus 5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.
Other skills, from other repositories
dsh-hooks-authoring
Instructions for writing and debugging dsh-hooks-plugin scripts, which run during tool or session events such as before a tool call or after it finishes. These scripts return JSON decisions such as allowing, asking about, or denying an action.
web-artifact-designer
A design workflow for producing self-contained HTML or SVG files that open directly in a browser. It covers visual work such as posters, infographics, landing pages, charts, banners, cards, and interface mockups.
healthcare-phi-compliance
Protected Health Information (PHI) and Personally Identifiable Information (PII) compliance patterns for healthcare applications. Covers data classification, access control, audit trails, encryption, and common leak vectors. Use when code touches PHI or PII in a healthcare system, or when auditing access control…
customs-trade-compliance
Codified expertise for customs documentation, tariff classification, duty optimization, restricted party screening, and regulatory compliance across multiple jurisdictions. Informed by trade compliance specialists with 15+ years experience. Includes HS classification logic, Incoterms application, FTA utilization, and…
hipaa-compliance
HIPAA-specific entrypoint for healthcare privacy and security work. Use when a task is explicitly framed around HIPAA, PHI handling, covered entities, BAAs, breach posture, or US healthcare compliance requirements.
prediction-market-risk-review
Review prediction-market, basket, oracle, and trading-agent workflows for compliance, safety, data-quality, privacy, and execution risk. Use before any workflow handles venue auth, user portfolio data, API keys, or trade planning.