Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

多社交平台内容同步

v1.0.0

多平台内容自动分发工具。在小红书发布后,自动将内容同步到抖音、视频号、快手。支持自动处理图片尺寸、填写标题标签、处理验证码。

0· 43·0 current·0 all-time
byrumu14@hwl1413520
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
medium confidence
Purpose & Capability
Name/description (multi-platform content distribution) align with the provided scripts, configs and docs: the repo contains image processing, content adaptation, captcha handling, login/cookie management and platform selectors — all expected for this function.
Instruction Scope
SKILL.md and scripts direct browser automation (Playwright/Selenium), reading/writing local config (accounts, cookies), logging to logs/distribute.log, and optionally using third‑party captcha services or local OCR/models. These actions are within scope but involve sensitive account credentials, cookies, and possible SMS/manual steps; the skill does not appear to access unrelated system resources.
Install Mechanism
No formal install spec in registry (instruction-only), but README/SKILL.md instruct pip install -r requirements.txt and 'playwright install chromium' which will download browser binaries. Dependencies are standard (playwright, Pillow, PyYAML, requests). The Playwright browser download is expected for this functionality but is a higher-friction step that downloads executable code.
Credentials
The skill does not request environment variables, but it requires local configuration files containing phone numbers, cookie paths, and optionally third‑party captcha API keys. Those secrets are proportional to the task but are sensitive — the config format stores API keys and phone numbers in plain YAML, so file permissions and secure handling are important.
Persistence & Privilege
Skill is not always-enabled and does not request elevated platform privileges. It runs as user-level scripts and stores cookies/config under the project; no evidence of modifying other skills or system-wide agent settings.
Assessment
This package is internally coherent for cross-platform reposting, but it handles sensitive account material and automates browser actions. Before installing or running it: (1) inspect scripts for any hardcoded remote endpoints or unexpected network calls (the shown files do not reveal exfiltration, but some code was truncated — review full distribute.py and CaptchaHandler), (2) keep config/accounts.yaml and any API keys out of public repos and set file perms to 600 as recommended, (3) prefer QR login when possible, avoid storing plain-text passwords or phone OTP interceptors, (4) be aware Playwright will download a Chromium binary and the scripts will control your browser sessions (run in a VM or isolated account if you are concerned), (5) if you enable third‑party captcha services (2captcha/anti-captcha) you will be providing an API key to an external service — consider the privacy and cost implications, and (6) ensure operation complies with each platform’s terms (automation may trigger account restrictions). If you want higher assurance, ask the author for a full code audit or run the skill in a sandbox before connecting real accounts.

Like a lobster shell, security has layers — review code before you run it.

latestvk972d5a6rgjn8tfg6s7b5x0d0n84pnnq
43downloads
0stars
1versions
Updated 6d ago
v1.0.0
MIT-0

多平台内容自动分发

在小红书发布内容后,自动同步到抖音、视频号、快手等多个平台。

核心功能

  • 🤖 自动同步: 从小红书获取内容,自动发布到其他平台
  • 🖼️ 图片适配: 自动处理不同平台的图片尺寸要求
  • 📝 智能填写: 自动填写标题、描述和标签
  • 🔐 验证码处理: 自动识别并处理发布后的验证码
  • ⚙️ 灵活配置: 支持自定义各平台发布策略

支持平台

平台状态图片尺寸特殊要求
小红书源平台3:4 / 1:1 / 4:3-
抖音✅ 支持9:16 (1080x1920)视频优先
视频号✅ 支持9:16 (1080x1920)需微信扫码
快手✅ 支持9:16 (1080x1920)-

快速开始

1. 配置账号信息

# 编辑配置文件
nano config/accounts.yaml
# config/accounts.yaml
platforms:
  xiaohongshu:
    enabled: true
    username: your_username
    # 使用扫码登录,无需密码
    
  douyin:
    enabled: true
    username: your_phone
    # 使用验证码登录
    
  shipinhao:
    enabled: true
    # 使用微信扫码登录
    
  kuaishou:
    enabled: true
    username: your_phone
    # 使用验证码登录

2. 运行分发

# 基本用法 - 同步最新发布的小红书内容
python3 scripts/distribute.py --source xiaohongshu

# 指定具体笔记
python3 scripts/distribute.py --note-id 123456789

# 同步到指定平台
python3 scripts/distribute.py --targets douyin,kuaishou

# 使用桌面端 App(更稳定)
python3 scripts/distribute.py --use-app

# 调试模式(查看浏览器操作)
python3 scripts/distribute.py --debug

3. 批量分发

# 批量同步最近 10 篇笔记
python3 scripts/batch_distribute.py --recent 10

# 从文件读取笔记列表
python3 scripts/batch_distribute.py --file notes.txt

图片尺寸自动适配

适配规则

源尺寸目标平台处理方式
3:4抖音 9:16上下加黑边 / 智能填充
1:1抖音 9:16上下加黑边
4:3视频号 9:16智能裁剪
9:16小红书 3:4左右加白边

智能填充选项

# config/image.yaml
image_processing:
  fill_mode: blur  # blur | solid | extend
  background_color: "#000000"
  blur_radius: 50
  quality: 95

标题标签智能处理

平台差异适配

# config/content.yaml
content_adaptation:
  xiaohongshu:
    max_title_length: 20
    max_desc_length: 1000
    max_tags: 10
    tag_prefix: "#"
    
  douyin:
    max_title_length: 55
    max_desc_length: 500
    max_tags: 5
    tag_prefix: "#"
    # 自动添加热门标签
    auto_tags: ["热门", "推荐"]
    
  shipinhao:
    max_title_length: 30
    max_desc_length: 300
    max_tags: 3
    tag_prefix: "#"
    
  kuaishou:
    max_title_length: 40
    max_desc_length: 400
    max_tags: 5
    tag_prefix: "#"

标签转换示例

小红书标签 → 各平台标签:

  • #穿搭分享 → 抖音: #穿搭分享 #ootd #时尚
  • #美食探店 → 快手: #美食探店 #吃货 #探店

验证码处理

支持的验证码类型

类型处理方式成功率
滑块验证码自动识别滑动距离85%
点选验证码图像识别 + 点击75%
文字验证码OCR 识别90%
短信验证码等待用户输入100%

验证码配置

# config/captcha.yaml
captcha:
  # 自动处理超时时间(秒)
  timeout: 30
  
  # 失败重试次数
  max_retries: 3
  
  # 第三方验证码服务(可选)
  service:
    enabled: false
    provider: "2captcha"  # 2captcha | anti-captcha
    api_key: "your_api_key"

高级用法

定时分发

# 每天 9:00 自动同步
python3 scripts/schedule.py --time "09:00" --daily

# 每周一、三、五 20:00 同步
python3 scripts/schedule.py --time "20:00" --days mon,wed,fri

内容过滤

# 只同步特定标签的内容
python3 scripts/distribute.py --filter-tag "穿搭"

# 排除特定关键词
python3 scripts/distribute.py --exclude "广告|推广"

发布策略

# config/strategy.yaml
publish_strategy:
  # 错峰发布
  stagger:
    enabled: true
    interval: 30  # 平台间隔 30 分钟
    
  # 随机延迟
  random_delay:
    enabled: true
    min: 5
    max: 15
    
  # 失败重试
  retry:
    enabled: true
    max_attempts: 3
    delay: 60

浏览器自动化

使用 Playwright(推荐)

# 安装依赖
pip install playwright
playwright install chromium

# 运行
python3 scripts/distribute.py --driver playwright

使用 Selenium

# 安装依赖
pip install selenium webdriver-manager

# 运行
python3 scripts/distribute.py --driver selenium

使用桌面端 App

# 需要安装各平台桌面客户端
python3 scripts/distribute.py --use-app

日志与监控

查看日志

# 实时查看日志
tail -f logs/distribute.log

# 查看最近 100 条
cat logs/distribute.log | tail -100

发布统计

# 生成发布报告
python3 scripts/report.py --period week

# 导出 CSV
python3 scripts/report.py --export csv --output report.csv

常见问题

Q: 登录状态会过期吗?

A: 会。建议:

  • 定期重新登录(每周一次)
  • 使用 --relogin 参数强制重新登录
  • 配置自动登录检测

Q: 图片处理速度慢怎么办?

A: 优化建议:

  • 使用本地图片缓存
  • 降低图片质量参数
  • 使用多线程处理

Q: 验证码处理失败怎么办?

A: 解决方案:

  • 增加重试次数
  • 使用第三方验证码服务
  • 切换到手动模式(等待用户输入)

Q: 如何避免被封号?

A: 安全措施:

  • 设置合理的发布间隔
  • 使用随机延迟
  • 避免短时间内大量发布
  • 模拟人工操作(鼠标移动、点击间隔)

安全提示

⚠️ 重要提醒

  1. 账号安全

    • 不要在公共环境保存密码
    • 使用扫码登录更安全
    • 定期更换密码
  2. 平台规则

    • 遵守各平台社区规范
    • 避免频繁操作触发风控
    • 注意内容版权
  3. 隐私保护

    • 配置文件设置权限 600
    • 不要在日志中记录敏感信息
    • 定期清理临时文件

故障排除

无法打开浏览器

# 检查 Chrome 安装
which google-chrome

# 重新安装 Playwright
playwright install --force chromium

元素定位失败

# 更新选择器配置
python3 scripts/update_selectors.py

# 使用调试模式查看页面结构
python3 scripts/distribute.py --debug --screenshot

登录失败

# 清除登录缓存
rm -rf data/cookies/*

# 强制重新登录
python3 scripts/distribute.py --relogin

参考文档

更新与支持

Comments

Loading comments...