Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

自动将视频发布到中国三大主流平台:**B站(Bilibili)**、**抖音(Douyin)**、**小红书(Xiaohongshu)**。

v1.0.0

自动发布视频到中国三大平台(B站、抖音、小红书)

4· 288·0 current·0 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for huanghonggit/video-auto-publisher-cn.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "自动将视频发布到中国三大主流平台:**B站(Bilibili)**、**抖音(Douyin)**、**小红书(Xiaohongshu)**。" (huanghonggit/video-auto-publisher-cn) from ClawHub.
Skill page: https://clawhub.ai/huanghonggit/video-auto-publisher-cn
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install video-auto-publisher-cn

ClawHub CLI

Package manager switcher

npx clawhub@latest install video-auto-publisher-cn
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
Name/description claim: automatic publishing to Bilibili, Douyin, Xiaohongshu. The code implements Playwright-based upload automation and cookie persistence which aligns with that purpose. Minor mismatch: auto_publish.py also contains a 'kuaishou' entry in PLATFORMS (not advertised in SKILL.md) and some docs reference login_platforms.py which is not present in the file manifest — these are inconsistencies but plausibly explainable as leftover code or incomplete packaging.
!
Instruction Scope
SKILL.md instructs installing Playwright and running login and publisher scripts. The code will launch a real browser, load and save cookies to cookies/*.json, and interact with live platform web pages (filling fields, clicking buttons, taking screenshots). It also requires manual login (input()) for initial cookie capture. The instructions claim '完全自动化' and '反检测/绕过反爬虫', which implies behavior designed to evade platform protections — this raises terms-of-service and ethical concerns even if not strictly malicious. There is no evidence in the provided code of external exfiltration, but runtime will access local cookies, logs, and will interact with remote platform domains.
Install Mechanism
No install spec in the skill bundle; README/SKILL.md instructs to pip install playwright and run 'python -m playwright install chromium'. This is a standard install path for Playwright but does download browser binaries from official sources. No arbitrary remote archive URLs were included in the skill manifest.
!
Credentials
The skill requests no environment variables or external credentials, which is consistent. However, it persistently stores cookies (cookies/*.json) and logs (logs/*.log) locally — these are sensitive artifacts (session cookies can grant account access). The skill does not declare or restrict where cookies/logs are stored; users should expect these files on disk and protect them. The documentation references a login_platforms.py script that is not present, which is an unexplained omission.
Persistence & Privilege
Skill flags are default (always:false, model invocation allowed). The skill does not request persistent platform-wide privileges or modify other skills. It writes cookies and logs within its own directory, which is normal for this kind of tool but is a local persistence risk (see environment_proportionality).
What to consider before installing
This package appears to be a Playwright-based browser automation tool for uploading videos, which is coherent with its stated purpose — but exercise caution: - The bundle will open real browsers and save session cookies to cookies/*.json and logs to logs/*.log; those cookie files can be used to access your accounts if leaked. Protect or delete them when not needed. - The README and SKILL.md refer to a login_platforms.py helper, but that file is not in the manifest; the login flow in the included code uses an interactive input() prompt. Expect some manual steps to capture cookies. Confirm the intended workflow before running unattended. - The code advertises 'anti-detection / 绕过反检测' behavior. Using automation to evade platform protections can violate terms-of-service and lead to account bans — review legal/ToS implications for each platform before use. - There are small inconsistencies (an extra 'kuaishou' entry, missing helper script) suggesting the package may be incomplete or poorly packaged. Review the full source (auto_publish.py and related modules) for any hidden network calls or telemetry before running. - Run first in a safe, isolated environment (VM/container) and with non-critical accounts. Inspect cookies/logs after a test run and consider starting with headless=False for visibility. If you are not comfortable reviewing Python code yourself, do not install or run this skill.

Like a lobster shell, security has layers — review code before you run it.

latestvk970w8rmd1t86f309jrhg6yx35837mfr
288downloads
4stars
1versions
Updated 12h ago
v1.0.0
MIT-0

video-auto-publisher-cn

自动将视频发布到中国三大主流平台:B站(Bilibili)、抖音(Douyin)、小红书(Xiaohongshu)。

功能特性

  • ✅ 完全自动化发布到三个平台
  • ✅ 自动上传视频文件
  • ✅ 自动填写标题、描述、标签
  • ✅ Cookie 持久化,保持登录状态
  • ✅ 智能成功检测
  • ✅ 详细日志记录

使用方法

基础用法

/video-auto-publisher-cn

这将自动发布最新的视频到三个平台。

指定视频文件

/video-auto-publisher-cn --video path/to/video.mp4

指定平台

/video-auto-publisher-cn --platforms bilibili,douyin

自定义标题和描述

/video-auto-publisher-cn --title "我的视频标题" --description "视频描述内容"

前置要求

  1. Python 环境: Python 3.8+
  2. 依赖安装:
    pip install playwright
    python -m playwright install chromium
    
  3. 首次登录: 需要先登录各平台保存 cookies

参数说明

  • --video: 视频文件路径(可选,默认使用最新视频)
  • --title: 视频标题(可选,默认自动生成)
  • --description: 视频描述(可选,默认自动生成)
  • --tags: 标签列表,逗号分隔(可选)
  • --platforms: 目标平台,逗号分隔(可选,默认全部)
  • --headless: 是否使用无头模式(可选,默认 false)

示例

发布到所有平台

/video-auto-publisher-cn

只发布到 B站 和抖音

/video-auto-publisher-cn --platforms bilibili,douyin

指定完整信息

/video-auto-publisher-cn \
  --video my_video.mp4 \
  --title "精彩视频" \
  --description "这是一个很棒的视频" \
  --tags "娱乐,搞笑,日常"

注意事项

  1. Cookies 有效期: Cookies 通常 7-14 天过期,需要重新登录
  2. 视频格式: 支持 MP4、MOV、MKV 等常见格式
  3. 视频大小:
    • B站: 16GB 以内
    • 抖音: 根据平台限制
    • 小红书: 根据平台限制
  4. 网络要求: 需要稳定的网络连接

故障排查

Cookies 过期

# 重新登录保存 cookies
python login_platforms.py

查看日志

# 日志保存在 logs/ 目录
cat logs/publish_*.log

技术细节

  • 浏览器自动化: Playwright
  • 反检测: 非 headless 模式 + 真实用户行为模拟
  • 成功检测: 多重验证机制(URL、关键词、元素)
  • 错误处理: 完善的异常捕获和日志记录

更新日志

v1.0.0 (2026-03-19)

  • ✅ 初始版本
  • ✅ 支持 B站、抖音、小红书
  • ✅ 完全自动化发布
  • ✅ Cookie 持久化
  • ✅ 详细日志记录

Comments

Loading comments...