Huozi

v0.3.2

Publish Markdown and HTML to huozi.app as beautiful, shareable web pages. Register, manage, and publish — all through conversation.

0· 101·0 current·0 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for dachein/huozi.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Huozi" (dachein/huozi) from ClawHub.
Skill page: https://clawhub.ai/dachein/huozi
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Required binaries: curl
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install huozi

ClawHub CLI

Package manager switcher

npx clawhub@latest install huozi
Security Scan
Capability signals
Requires sensitive credentials
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
Name/description (publish Markdown/HTML to huozi.app) align with the declared requirements: curl binary and a HUOZI_API_KEY primary credential. The onboarding flow and page endpoints all target huozi.app and are appropriate for a publisher integration.
Instruction Scope
Instructions direct the agent to run curl calls to huozi.app auth and pages endpoints and to prompt the user for email and verification codes. This is within scope. Minor note: the doc says to "Save the returned access_token" but doesn't specify where or how the agent should persist it, so the agent (or user) will need to choose storage; that token and the resulting api_key are sensitive and the SKILL.md also instructs the user to export HUOZI_API_KEY for future sessions.
Install Mechanism
No install spec and no code files — instruction-only. This minimizes risk because nothing is downloaded or written by an installer. It does require curl be present (declared).
Credentials
Only a single service credential (HUOZI_API_KEY) is declared as the primary credential, which is appropriate for a publishing skill. No unrelated secrets or system config paths are requested.
Persistence & Privilege
always is false and autonomous invocation is enabled (default) — appropriate for a user-invocable publishing skill. The skill suggests exporting the API key to HUOZI_API_KEY for convenience; that is expected but users should be aware that this grants the skill permission to publish using that key.
Assessment
This skill appears to do what it says: it will prompt you for an email and verification code to create a Huozi account (if you don't already have an API key), then use the returned token/api_key to publish pages via the huozi.app API using curl. Before installing: (1) be prepared to provide an email and a verification code during onboarding; (2) understand that HUOZI_API_KEY grants the skill permission to publish and update pages on your behalf — only install if you trust huozi.app; (3) consider using a dedicated/limited account or token and avoid placing the API key in shared, long-lived global environment variables if you have multi-user systems; (4) the skill is instruction-only (no code is installed), which reduces installer risk but does not remove the risk of publishing content if the API key is compromised.

Like a lobster shell, security has layers — review code before you run it.

Runtime requirements

📄 Clawdis
OSmacOS · Linux · Windows
Binscurl
Primary envHUOZI_API_KEY
agentvk9778bcyaea0vekrbzsf5qcrw584v0syhtmlvk9778bcyaea0vekrbzsf5qcrw584v0sylatestvk9778bcyaea0vekrbzsf5qcrw584v0symarkdownvk9778bcyaea0vekrbzsf5qcrw584v0sypublishingvk9778bcyaea0vekrbzsf5qcrw584v0sy
101downloads
0stars
7versions
Updated 1w ago
v0.3.2
MIT-0
macOS, Linux, Windows

Huozi — Markdown & HTML Publishing for Agents

Publish Markdown or HTML content to huozi.app as shareable web pages. One API call, instant publishing.

Onboarding

IMPORTANT: When this skill is first loaded, check if HUOZI_API_KEY is set. If NOT, do NOT just show a link — immediately start the interactive registration flow below. Guide the user through it conversationally, step by step.

Step 1 — Ask for email

Tell the user: "Let's set up your Huozi account. What's your email?" Then call:

curl -s -X POST https://huozi.app/api/v1/auth/signup \
  -H "Content-Type: application/json" \
  -d '{"email": "<user_email>"}'

Tell the user: "A verification code has been sent to your email. Please check your inbox and tell me the code."

Step 2 — Verify the code

When the user provides the code:

curl -s -X POST https://huozi.app/api/v1/auth/verify \
  -H "Content-Type: application/json" \
  -d '{"email": "<user_email>", "code": "<code>"}'

Save the returned access_token.

Step 3 — Create workspace

Suggest a slug from the user's email username (e.g. alice@gmail.comalice). Tell the user:

"Your pages will be published at huozi.app/alice/ — would you like to change this, or is this OK?"

After the user confirms (or gives a new slug):

curl -s -X POST https://huozi.app/api/v1/auth/setup \
  -H "Authorization: Bearer <access_token>" \
  -H "Content-Type: application/json" \
  -d '{"workspace_slug": "<confirmed_slug>"}'

Step 4 — Done!

The response contains api_key and workspace.url. Tell the user:

"All set! Your workspace is huozi.app/<slug>/. To save your API key for future sessions, run: export HUOZI_API_KEY=<api_key> You can now publish Markdown anytime — just tell me what to publish."

Publishing Markdown

Publish or update a Markdown page:

curl -s -X POST https://huozi.app/api/v1/pages \
  -H "Authorization: Bearer <api_key>" \
  -H "Content-Type: application/json" \
  -d '{"title": "<title>", "slug": "<slug>", "content": "<markdown>"}'
  • slug is optional — auto-generated from title if omitted. Keep under 8 words (e.g. weekly-report-apr-14)
  • Same slug = upsert (update existing page)
  • Response includes the public url

Publishing HTML

Publish a static HTML page — perfect for landing pages, dashboards, reports with custom styling:

curl -s -X POST https://huozi.app/api/v1/pages \
  -H "Authorization: Bearer <api_key>" \
  -H "Content-Type: application/json" \
  -d '{"title": "<title>", "slug": "<slug>", "content": "<html>", "content_type": "html"}'
  • Set content_type to "html" (defaults to "markdown" if omitted)
  • Same slug = upsert, versioning, and access tokens work identically to Markdown pages

HTML Input Format

  • Full document: <html><head>...</head><body>...</body></html> — head is parsed for <style> and <meta>, body is rendered
  • Fragment: any HTML without <html>/<head> tags — treated as body content directly
  • <meta> OG tags (og:title, og:description, og:image) and <meta name="description"> are extracted as fallback metadata; API fields (title, description) always take priority

HTML Constraints — What Is Allowed

CategoryAllowedBlocked
HTML tagsAll standard tags: div, span, table, form, svg, img, video, audio, etc.<script>, <iframe>, <embed>, <object>, <link rel="stylesheet">
CSS<style> blocks, inline style="", all standard properties (flexbox, grid, animations, transforms, etc.)@import, expression(), javascript: in url(), -moz-binding, behavior:
JavaScriptNoneAll <script> tags stripped; all event handlers (onclick, onerror, onload, etc.) stripped
URLshttp:, https:, mailto:, tel:javascript: (rewritten to #), data: in CSS url()
Images<img> with http:/https:/data: src
SVGFull inline SVG support (path, circle, rect, gradient, filter, etc.)External SVG via <img src> works; <use href="external.svg"> does not
FormsDisplay only — <input>, <select>, <textarea>, <button> render but action/method are strippedNo form submission
External resourcesImages (<img src>), video/audio (<video>, <audio>) via http:/https:External CSS (<link>), external JS, @import
Content sizeMax 2MB per page

Best Practices for HTML Pages

  • Include all CSS inline — use <style> blocks in <head> or inline style="" attributes; external stylesheets are not supported
  • Use system fonts or web-safe fonts@import for Google Fonts is blocked; use font-family: system-ui, sans-serif or embed fonts as base64 @font-face if essential
  • Embed small images as data URIs — for icons/logos under ~50KB; larger images should be hosted externally and referenced via https:// URLs
  • Design responsive layouts — pages are served full-width; use max-width on a container and CSS media queries for mobile support
  • Set a background color — the page has no default background; always set background on body or a wrapper element

Other Operations

ActionMethodEndpoint
List pagesGET/api/v1/pages
Get pageGET/api/v1/pages/<slug>
Update pagePUT/api/v1/pages/<slug>
Delete pageDELETE/api/v1/pages/<slug>

All require Authorization: Bearer <api_key> header. Base URL: https://huozi.app

Examples

  • "帮我把这个 markdown 发布到 huozi" → publish content, return URL
  • "发布我的周报" → generate slug like weekly-report-2026-04-14, publish
  • "更新 huozi 上的 hello 页面" → PUT to update
  • "帮我做一个 landing page 发布到 huozi" → generate HTML, publish with content_type: "html"
  • "把这个报告做成网页发布" → generate styled HTML page, publish

Notes

  • API keys start with hz_ prefix
  • No password needed — registration uses email OTP only
  • Markdown: supports GFM, task lists, code highlighting, math (KaTeX)
  • HTML: full CSS + SVG + images, no JavaScript — see constraints table above
  • Content limit: 2MB per page for both Markdown and HTML
  • Use curl via Bash to make API calls
  • When generating HTML for the user, always produce self-contained pages with all CSS inlined
  • Full API reference (agent-friendly): https://huozi.app/docs4agent
  • Setup options: https://huozi.app/start
  • Human-readable docs: https://huozi.app/docs

Comments

Loading comments...