by 安全扫描
OpenClaw
安全
high confidenceThe skill's instructions and requirements are consistent with a browser-automation social-media publishing helper; it asks for no unrelated credentials or installs and is instruction-only.
评估建议
This skill is internally consistent, but before installing consider the following:
- Browser automation can act using whatever account/session is present in the built-in browser. Do not leave sensitive accounts logged in unless you trust the runtime. Prefer to log in manually and ensure 2FA is enabled.
- Confirm that the skill truly prompts you for a final confirmation and a preview of the content before any publish action; require an explicit approval step for every publish.
- Ask the provi...详细分析 ▾
✓ 用途与能力
Name/description (browser automation to publish to WeChat Official Accounts, Baijiahao, Xiaohongshu) match the SKILL.md steps (open site, manual login, create post, upload cover, save/publish). The skill requests no environment variables, binaries, or installs that would be unexpected for this purpose.
ℹ 指令范围
The instructions stay within the publishing workflow (open backend sites, ask user for title/content/cover, use built-in browser to automate posting). However they are somewhat high-level and grant the agent broad discretion to navigate and interact with the web UIs ("使用浏览器自动化完成发布"). The file does not explicitly constrain what the agent may click or read from the pages (e.g., session cookies, account pages), so there's a small risk of overreach if the runtime automation is not tightly sandboxed. The skill does state the user must confirm the publish action and that first-time login is manual.
✓ 安装机制
Instruction-only skill with no install spec, no downloads, and no third-party packages requested. This is low-risk from an installation perspective.
✓ 凭证需求
No environment variables, credentials, or config paths are requested. That aligns with the described browser-automation approach which relies on manual login/session in the built-in browser.
✓ 持久化与权限
always:false (no forced inclusion) and no claims to modify other skills or system-wide settings. The skill does not request persistent privileges or to store secrets itself.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/3/4
Initial release of social-media-publish skill: - Enables browser automation publishing for major social media platforms (WeChat Official Accounts, Baijiahao, Xiaohongshu). - Supports publishing articles with title, content, and cover image. - Guided publishing flows for WeChat and Baijiahao, with platform-specific instructions. - User can trigger by phrases like "发公众号", "发百家号", or "发布到...". - Requires user login; operations confirmed by user for security. - Supports automatic formatting and Markdown content conversion.
● 无害
安装命令 点击复制
官方npx clawhub@latest install social-media-publish
镜像加速npx clawhub@latest install social-media-publish --registry https://cn.clawhub-mirror.com
技能文档
使用场景
用户想通过浏览器自动化方式发布内容到社交媒体平台（微信公众号、百家号、小红书等）。支持平台
1. 微信公众号
- 发布图文消息到草稿箱
- 支持标题、正文、封面图
- 自动格式化排版
2. 百度百家号
- 发布图文文章
- 支持标题、正文、封面图
- 自动选择分类
3. 小红书
- 发布长文笔记
- 使用 xiaohongshu-publish 技能
发布流程
微信公众号发布
- 进入后台
- 新建图文
- 填写内容
- 保存/发布
百家号发布
- 进入后台
- 新建文章
- 填写内容
- 发布
命令示例
用户说：
- "发公众号"
- "发微信公众号"
- "发百家号"
- "发布到公众号"
- "把这篇文章发到公众号"
AI 响应：
- 确认发布平台
- 询问标题和内容
- 询问是否需要封面图
- 使用浏览器自动化完成发布
注意事项
- 首次使用需要用户手动登录对应平台
- 浏览器使用 OpenClaw 内置浏览器
- 发布操作会由用户最终确认（安全考虑）
- 支持 Markdown 格式内容自动转换
配置
无需特殊配置，直接操作网页版后台。
建议用户：
- 保持登录状态
- 提前准备好封面图
- 确认账号权限（个人订阅号只能保存草稿）
数据来源：ClawHub ↗ · 中文优化：龙虾技能库
OpenClaw 技能定制 / 插件定制 / 私有工作流定制
免费技能或插件可能存在安全风险，如需更匹配、更安全的方案，建议联系付费定制