📦 Article Publisher — 自媒体一键发布
v1.5.1基于 Playwright 的浏览器自动化工具，可同时在知乎、B站、百家号、头条号、小红书等主流自媒体平台一键发布文章，支持扫码登录与 Cookie 持久化，省去多平台重复搬运烦恼。
1· 369·2 当前·2 累计
by @phoenix1630下载技能包
最后更新
2026/3/24
安全扫描
OpenClaw
安全
high confidenceNULL
评估建议
This package appears to be what it says: a Playwright-based publisher that automates a real browser. Before installing, consider:
- It will require running 'npm install' and 'npx playwright install chromium', which will download Playwright and a Chromium binary. Use a network/host you trust.
- The tool drives a browser and will persist login cookies locally via its CookieManager. Treat the cookie files as sensitive (don't share them). If you are uncomfortable, review the cookie-manager implem...详细分析 ▾
✓ 用途与能力
The name/description (multi-platform article publishing via Playwright) matches the provided code and README: adapters for Zhihu, Bilibili, Toutiao, Baijiahao, Xiaohongshu; browser automation logic; cookie management. There are no unrelated requested credentials, binaries, or config paths.
ℹ 指令范围
SKILL.md instructs user/agent to run npm install and 'npx playwright install chromium' and to perform QR code login. The runtime code manipulates page DOM, clicks buttons, uploads local files (cover images), and saves cookies locally. These behaviors are within the stated purpose, but they do mean the skill will access local files (images provided by the user) and persist authentication cookies on disk—both are sensitive operations that are, however, expected for a browser automation publisher.
✓ 安装机制
No opaque remote download URLs are embedded in the registry metadata or SKILL.md. package.json depends on the official 'playwright' npm package and includes standard 'npx playwright install' commands (with an optional mirror override in scripts). This is a normal install flow for Playwright and not an arbitrary archive download from a personal server.
✓ 凭证需求
The skill declares no required environment variables or external credentials. It operates via QR login and cookie persistence, which is appropriate. There are no unexpected SECRET/TOKEN env var requests in metadata. The main sensitivity is cookies and any local files the user supplies (cover images).
✓ 持久化与权限
The skill is not force‑always included and uses normal autonomous invocation settings. It persists cookies locally (CookieManager usage visible in code), which is expected for reusing login sessions but is a form of local persistence — it does not request or modify other skills' configurations.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.5.12026/3/18
NULL
● 无害
安装命令
点击复制官方npx clawhub@latest install article-publisher
镜像加速npx clawhub@latest install article-publisher --registry https://cn.longxiaskill.com