Video Publish All
v1.0.0全平台视频发布汇总。对比四大国内视频平台（小红书、抖音、B站、视频号）的发布规则和步骤，提供最佳发布策略。自动选择最适合的平台组合。
⭐ 1· 533·2 current·2 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Suspicious
medium confidencePurpose & Capability
The SKILL.md advertises '一键发布视频' (one‑click publish) to four platforms, but the skill includes no code, no install steps, and declares no environment variables or credentials — yet publishing requires platform authentication. This mismatch (claimed capability vs. no declared mechanism for credentials or API usage) is incoherent.
Instruction Scope
Runtime instructions are a high‑level guide and include examples that ask the agent to perform uploads, but they do not explain how to authenticate or interact with APIs. The document also explicitly instructs reading a local file (/home/johnny/.openclaw/workspace/pjm/published.json) and references a hardcoded user path and workspace — instructions that access user filesystem state beyond what's declared and that may not be appropriate for a generic skill.
Install Mechanism
No install spec and no code files are present, so nothing is written to disk and no external packages are fetched. Instruction‑only skills are lower risk from installation perspective.
Credentials
The skill requests no credentials or environment variables even though authenticating to platforms (Douyin, Xiaohongshu, Bilibili, Weixin) normally requires API keys, OAuth, or login cookies. The absence of declared credential requirements is disproportionate to the stated functionality. Additionally, the instructions reference a specific local path (implying access to local state) that was not declared in required config paths.
Persistence & Privilege
always is false and there is no indication the skill requests persistent elevated privileges or modifies other skills or global agent settings.
Scan Findings in Context
[no_findings] unexpected: The regex scanner found no code to analyze (instruction‑only). Absence of findings is expected for a doc‑only skill, but that does not validate the described capabilities — the SKILL.md itself contains the surface area that needs scrutiny.
What to consider before installing
This skill's description promises automated multi‑platform publishing but provides no authentication method or code to perform uploads, and it instructs reading a hardcoded local file path. Before using, ask the author how authentication will be handled (OAuth/API keys/cookies), whether the agent will open browser sessions or require you to paste credentials, and where any tokens would be stored. Do not supply account secrets until you understand the exact upload mechanism. If you plan to use local state tracking (published.json), change the hardcoded path to a path you control and verify the skill only reads the intended file. Prefer skills that explicitly declare required credentials and explain their auth flow, or use platform‑specific, reviewed publish tools instead.Like a lobster shell, security has layers — review code before you run it.
compare=1.0.0vk977zjs4fpjvc5sdx0s6ekehp582adyplatestvk977zjs4fpjvc5sdx0s6ekehp582adyplatest=1.0.0vk977zjs4fpjvc5sdx0s6ekehp582adypvideo-publish-all=1.0.0vk977zjs4fpjvc5sdx0s6ekehp582adyp
License
MIT-0
Free to use, modify, and redistribute. No attribution required.