Integrate Spider XHS
Keep this adapter audit-only. The pinned repository has no LICENSE file, claims non-commercial-only use, and includes reverse-engineered signing and risk-control behavior.
Workflow
- Read references/integration.md before inspecting or proposing any connection.
- Resolve the local repository and verify remote, pinned commit, missing LICENSE, README restrictions, and worktree.
- Inspect manifests and interfaces statically. Do not install dependencies or execute repository code.
- Inventory the requested capability and classify it as read-only public data, account/private data, login, signing, anti-detection, creator publishing, KOL data, distributor data, or local utility.
- Stop unsupported categories and propose an official API, user-controlled browser, exported first-party data, or licensed vendor alternative.
- If the user obtains written permission and platform authorization, require a fresh security/legal review before changing this audit-only boundary.
- Report facts from the pinned source without reproducing signing algorithms, secrets, or bypass instructions.
Hard Stops
- Never execute
pip install, npm install, Docker, python main.py, or python -m spider.spider for this repository under this Skill.
- Never assist with signature reverse engineering, fingerprint mutation, proxy rotation, automatic retry intended to evade controls, CAPTCHA/SMS bypass, scraping private data, or unauthorized publishing.
- Never treat a README badge as a license grant.
Agent Output
Return repository identity, license state, static interface map, blocked capabilities, compliant alternatives, and requirements for any future re-review.
1---2name: integrate-spider-xhs3description: Perform static architecture, dependency, license, and interface assessment of the pinned cv-cat/Spider_XHS repository and design a compliant replacement or integration boundary. Use only when the user explicitly names Spider_XHS, its PC/Creator/KOL/Qianfan APIs, or asks to audit that repository. Do not use to run its login, signing, scraping, proxy, fingerprint, anti-detection, invitation, upload, or publishing capabilities.4---5
6# Integrate Spider XHS
7
8Keep this adapter audit-only. The pinned repository has no LICENSE file, claims non-commercial-only use, and includes reverse-engineered signing and risk-control behavior.
9
10## Workflow
11
121. Read [references/integration.md](references/integration.md) before inspecting or proposing any connection.
132. Resolve the local repository and verify remote, pinned commit, missing LICENSE, README restrictions, and worktree.
143. Inspect manifests and interfaces statically. Do not install dependencies or execute repository code.
154. Inventory the requested capability and classify it as read-only public data, account/private data, login, signing, anti-detection, creator publishing, KOL data, distributor data, or local utility.
165. Stop unsupported categories and propose an official API, user-controlled browser, exported first-party data, or licensed vendor alternative.
176. If the user obtains written permission and platform authorization, require a fresh security/legal review before changing this audit-only boundary.
187. Report facts from the pinned source without reproducing signing algorithms, secrets, or bypass instructions.
19
20## Hard Stops
21
22- Never execute `pip install`, `npm install`, Docker, `python main.py`, or `python -m spider.spider` for this repository under this Skill.
23- Never assist with signature reverse engineering, fingerprint mutation, proxy rotation, automatic retry intended to evade controls, CAPTCHA/SMS bypass, scraping private data, or unauthorized publishing.
24- Never treat a README badge as a license grant.
25
26## Agent Output
27
28Return repository identity, license state, static interface map, blocked capabilities, compliant alternatives, and requirements for any future re-review.
29
aAAaqwq