Xhs Post Factory
v1.0.0小红书多输入内容生成技能。用于将 pdf/md/txt/json 等文件转为结构化的小红书博文。默认生成论文解读（paper-interpretation）类型，输出 xhs-post.md 与 xhs-post.json 到输入文件所在目录，并保留可扩展模板机制以支持后续更多博文类型。
⭐ 0· 224·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description (convert documents into Xiaohongshu post drafts, defaulting to paper-interpretation) matches the provided SKILL.md, style guide, and template files. There are no unrelated environment variables, binaries, or install steps requested.
Instruction Scope
Instructions operate on local inputs (pdf/md/txt/json) and explicitly read related artifacts in the same directory (e.g., paper-card.md, *_parsed.json) to reuse prior parsing; they always write xhs-post.md and xhs-post.json to the input file directory. This is coherent for the task, but users should note the skill will read other files in the input directory and will create files next to their inputs.
Install Mechanism
No install spec and no code files — the skill is instruction-only, which minimizes installation risk (nothing is downloaded or written to disk by an installer beyond outputs the agent writes as normal operation).
Credentials
The skill declares no required environment variables, credentials, or config paths. The template optionally references an external 'humanizer-zh' skill if present, but this is optional and does not introduce new declared credentials.
Persistence & Privilege
The skill is not always-enabled, does not request elevated persistence, and does not modify other skills' configurations. Autonomous invocation is allowed by default but is normal for skills and is not combined with other concerning privileges here.
Assessment
This skill appears coherent and low-risk in itself, but consider these practical points before enabling: (1) it will read files in the same directory as your input and will write xhs-post.md and xhs-post.json next to them — avoid running it on directories containing sensitive documents; (2) the template can call an optional 'humanizer-zh' skill if present — only enable/trust that complementary skill if you trust it; (3) review generated posts before publishing (the skill intentionally avoids fabricating facts but still relies on the input text); (4) because it's instruction-only, no extra binaries are installed, but the agent performing the skill will need permission to read/write the target folder. If you want stricter limits, run the skill on a copy of the documents or in a directory dedicated to generated content.Like a lobster shell, security has layers — review code before you run it.
latestvk978kz67h82btsq794kcrbggc182m7ye
License
MIT-0
Free to use, modify, and redistribute. No attribution required.