XiaoHongShu Viral Post Generator

AI 一键生成小红书爆款笔记（标题、正文、标签、封面提示、发帖策略）。真实种草风，防封号友好。

Security Scan

The skill's code, declared env vars, and runtime instructions are consistent with a Xiaohongshu post generator: it uses OpenAI for generation and SkillPay for billing and does not attempt to access unrelated local secrets or system resources.

Purpose & Capability

Name/description, required env vars (OPENAI_API_KEY, SKILLPAY_KEY), and code (openai + axios usage, datamuse keyword fetch, SkillPay charge) all align with generating social media posts and per-call billing. Declared dependencies in package.json match functionality.

Instruction Scope

SKILL.md and code instruct the agent to call OpenAI, a public keyword API, and SkillPay. The runtime only reads the declared env vars and the input.topic; it does not scan local files or read unrelated system data. External network calls are limited to expected endpoints.

Install Mechanism

There is no explicit install spec (instruction-only) which minimizes install-time risk, but a package.json is present listing npm deps (openai, axios). If installed, npm will fetch these packages — standard but worth auditing if you install locally.

Credentials

Requested env vars (OPENAI_API_KEY for content generation, SKILLPAY_KEY for billing) are proportional to the stated purpose. Minor inconsistency: the code reads an optional SKILLPAY_ENDPOINT env var (to override billing endpoint) but SKILL.md does not declare it; it's optional and not required. Both declared keys are sensitive and would be sent to their respective services (OpenAI, SkillPay).

Persistence & Privilege

The skill is not force-included (always: false), does not request elevated system privileges, and does not modify other skills or system-wide configs. Autonomous invocation is allowed by default but not combined with other red flags.

Assessment

This skill appears to do what it says: it sends your topic to OpenAI to generate title/content and to SkillPay to charge per call. Before installing: (1) ensure you trust the SkillPay provider and the billing ID (you will need to provide SKILLPAY_KEY); (2) understand that any input/topic will be transmitted to OpenAI and the public keyword API; (3) if you install locally, npm will fetch dependencies (openai, axios) — consider auditing them or running in a restricted environment; (4) test with non-sensitive topics and confirm billing behavior and endpoints (note: SKILLPAY_ENDPOINT can be overridden via env but isn’t declared in docs). If any of these are unacceptable, do not install or provide the keys.

面向 OpenClaw / ClawHub 的小红书爆款笔记生成 Skill。

Requirements

必须配置的环境变量：

• OPENAI_API_KEY
• SKILLPAY_KEY

用途说明：

• OPENAI_API_KEY：用于调用 OpenAI API 生成标题与正文。
• SKILLPAY_KEY：用于调用 SkillPay 计费接口，按次扣费。

Security & External APIs

本 Skill 的网络行为如下：

• 调用 OpenAI API（内容生成）。
• 调用公开关键词 API（趋势关键词发现）。
• 调用 SkillPay API（每次执行计费）。

本 Skill 不读取本地文件，不扫描本地目录，不访问除环境变量外的本地敏感信息。

Pricing

• 价格：0.05 USDT / 次
• SkillPay ID：66d32381-4e78-4593-9309-63576e85a8b7

Input

{
  "topic": "夏日通勤穿搭"
}

Output

{
  "title": "...",
  "content": "...",
  "hashtags": ["#...", "#...", "#...", "#...", "#..."],
  "coverPrompt": "...",
  "strategy": {
    "bestTime": "20:30",
    "audience": "...",
    "hook": "..."
  }
}

Runtime Pipeline

1. 获取趋势关键词
2. 调用 GPT-4o 生成标题与正文
3. 生成并排序标签
4. 生成封面图提示词
5. 生成发帖策略
6. 调用 SkillPay 扣费