多平台视频发布

This skill appears to implement what it says (automated multi‑platform uploads) but has some inconsistencies you should address before trusting it: 1) The skill metadata lists no environment requirements but the code needs a local Chrome, Python packages (playwright, biliup, etc.) and may expect a biliup executable — verify the biliup binary included with the package is legitimate. 2) setup.py will run pip install and playwright install (it will download Chromium) — run that manually in an isolated environment first. 3) The skill saves/account cookies under scripts/cookies; those files contain account session data — treat them as sensitive and store them securely. 4) Xiaohongshu signing can call an XHS_SERVER (default localhost) — ensure you run your own local signing service or keep XHS_SERVER pointed to localhost; do not point it to an untrusted remote server. 5) If you plan to let the agent invoke this skill autonomously, be aware it can read/write cookies and run browser automation (which could interact with logged‑in accounts). Recommended actions: inspect the bundled biliup executable (if present), run setup.py and publish.py manually in a controlled environment first, confirm XHS_SERVER behavior, and back up/remove any saved cookie files for accounts you do not want automated. If you want, provide me with specific files (e.g., the Bilibili uploader folder or any included executables) and I can look for anomalies in those binaries or scripts.

These patterns may indicate risky behavior. Check the VirusTotal and OpenClaw results above for context-aware analysis before installing.