📦 FB Personal Poster — 技能工具

v1.0.0

Post text and photos to personal Facebook timeline using browser automation (Patchright/Playwright). Use when: user asks to post to personal Facebook, publis...

0· 74·0 当前·0 累计

by @oangogah-claw·MIT-0

网络工具浏览器自动化系统工具图像处理

下载技能包

License

MIT-0

最后更新

2026/3/28

安全扫描

VirusTotal

可疑

查看报告

OpenClaw

可疑

medium confidence

The skill's code and instructions match its stated purpose (browser automation posting to a personal Facebook timeline) but there are important inconsistencies and sensitive requirements (Facebook session cookies) that you should verify before installing or running it.

评估建议

This skill appears to do what it says (automated posting to a personal Facebook timeline) but it requires a Facebook session cookie file (FB_COOKIE_FILE) which grants full access to your account. Before installing or running it: (1) verify the skill source and owner — the package shows no homepage and registry metadata omits the env vars the SKILL.md requires; treat this as a red flag. (2) Inspect the code yourself (or have someone you trust do so) and run in an isolated environment or throwaway...

详细分析 ▾

✓ 用途与能力

Name/description, SKILL.md, and the included Python script all consistently implement posting to a personal Facebook timeline via Patchright/Playwright using session cookies or Playwright storage state. There are no unrelated services or credentials requested by the code; the required functionality (cookies/state and Playwright) is coherent with the stated purpose.

ℹ 指令范围

SKILL.md and the script instruct the agent to read a Facebook cookies JSON (FB_COOKIE_FILE) or Playwright storage state and to control a Chromium browser to navigate and interact with facebook.com. This is within the expected scope for automating personal-posting, but it requires full session cookies (which grant broad account access). The instructions also advise installing packages and running 'python -m patchright install chromium' — these steps are explicit and expected. No instructions appear to exfiltrate data to other endpoints.

✓ 安装机制

There is no opaque download URL; the SKILL.md asks to pip install the requirement (patchright) and install Chromium via patchright. That is a common pattern for Playwright-like tooling. Note: pip installs can pull arbitrary code — verify the package source and version before installing in a sensitive environment.

⚠ 凭证需求

The skill requires a Facebook session cookie JSON (FB_COOKIE_FILE) and a writable FB_STATE_FILE as declared in SKILL.md and used in the script; these are sensitive because cookies provide full account access. However, the registry metadata lists no required environment variables or primary credential — a mismatch that reduces transparency. Requiring cookies is proportionate to the stated goal but the metadata omission is concerning and should be corrected/verified before use.

✓ 持久化与权限

The skill does not request always:true, does not modify other skills or global agent settings, and has no service that would persistently run beyond user invocation. It writes/reads a local state file if configured, which is expected for Playwright sessions.

安全有层次，运行前请审查代码。

License

MIT-0

可自由使用、修改和再分发，无需署名。

查看条款 ↗

运行时依赖

无特殊依赖

版本

latestv1.0.02026/3/28

Initial release: Post text + photos to personal Facebook timeline via Patchright stealth browser automation

● 可疑

安装命令

点击复制

官方npx clawhub@latest install fb-personal-poster

镜像加速npx clawhub@latest install fb-personal-poster --registry https://cn.longxiaskill.com

技能文档

Post text + photos to personal Facebook timeline via Patchright stealth browser automation.

Why Not Graph API?

Facebook removed publish_actions permission in 2018. API cannot post to personal timelines. Only browser automation works — this skill uses Patchright (stealth Chromium) to mimic human behavior.

Requirements

cd scripts/ && pip install -r requirements.txt
python -m patchright install chromium

Environment Variables

Variable	Required	Description
`FB_COOKIE_FILE`	✅	Path to Facebook cookies JSON (Selenium format). Full account access.
`FB_STATE_FILE`	✅	Writable path for Playwright state (default: `/tmp/fb_state.json`)
`FB_DRY_RUN`	—	`true` (default) = preview only. `false` = actually post.
`FB_USER_AGENT`	—	Override browser user agent

How to Get Cookies

Log in to Facebook in Chrome (manually, once)
Export all facebook.com cookies as JSON via EditThisCookie extension
Save to path in FB_COOKIE_FILE with chmod 600

Cookies last ~30–90 days. Re-export when expired.

Usage

Text-only post

FB_COOKIE_FILE=~/.fb_cookies.json FB_DRY_RUN=false \
  python3 scripts/fb_post.py -m "Hello from automation!"

Post with photos

FB_COOKIE_FILE=~/.fb_cookies.json FB_DRY_RUN=false \
  python3 scripts/fb_post.py -m "Beautiful day!" -p photo1.jpg photo2.jpg

Dry run (default)

python3 scripts/fb_post.py -m "Test post" -p photo.jpg
# No actual posting — previews the flow

OpenClaw Integration (Recommended)

Use the built-in browser tool — already proven working for personal timeline posting:

# Step 1: Navigate to Facebook
browser(action="navigate", url="https://www.facebook.com/")
# Step 2: Confirm on personal profile (url should be facebook.com/me)
# Step 3: Click "What's on your mind"
browser(action="act", kind="click", ref="[post input box]")
# Step 4: Type message
browser(action="act", kind="type", text="Your message here")
# Step 5: Upload photo (if needed)
browser(action="upload", paths=["/path/to/photo.jpg"])# Step 6: Set sharing to Public
# Step 7: Click Post button
browser(action="act", kind="click", ref="[post button]")

Tips

Facebook 頁面結構複雜，selector 會變，用 snapshot 找當前可用的 ref
上傳圖片用 browser(action="upload") 功能
如果 timeout，重試一次通常就好
個人動態和粉絲專頁的操作流程不同，注意確認在正確頁面

Safety

Dry-run is ON by default — must explicitly set FB_DRY_RUN=false for live posting
Cookies stored locally with chmod 600 — never committed to git
Human-like delays and typing speed to avoid detection

数据来源：ClawHub ↗ · 中文优化：龙虾技能库