百家号发布器
v1.0.0使用 auth 登录态打开百家号发布页，可填入标题与正文（支持 .md 转富文本）、选封面、存草稿或发布。当用户需要发布百家号、用 cookie 打开编辑页、或配合 OpenClaw 自动发布/存草稿时使用。
⭐ 0· 339·2 current·2 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
Name/description state: open Baijiahao editor with an existing login and optionally fill title/content, choose cover, save draft or publish. Declared requirements (python3, Playwright, markdown) and the script that loads Playwright and accepts an auth file/cookie text are consistent with that purpose.
Instruction Scope
SKILL.md tells the agent to install Playwright and run the included Python script with an auth file or cookie text and optional content files; the runtime instructions operate on the Baijiahao editor page and on local files the user supplies (auth, markdown/content). The script reads only the provided auth and content files and interacts with the baijiahao.baidu.com editor — no instructions to read unrelated system credentials or to send data to other endpoints were found in the visible code.
Install Mechanism
No install spec is embedded (instruction-only for dependency installation). Dependencies are standard Python packages (playwright, markdown) and Playwright will download Chromium when the user runs its install step; there are no custom download URLs or obscure archives in the package.
Credentials
The skill requests no environment variables or platform credentials. It expects the user to provide an auth storage_state file or a cookie text file; that is appropriate for a browser-automation publishing tool. The script accepts arbitrary file paths for auth/content (normal for this functionality) — users should only point it at files they trust.
Persistence & Privilege
Skill is user-invocable, not forced-always. It does not request to modify other skills or system-wide agent settings. It does require installing Playwright/Chromium (normal for browser automation) but does not demand permanent elevated privileges.
Assessment
This skill appears internally consistent for automating Baijiahao publishing. Before installing, consider: (1) you must supply a login state (auth.json) or cookie text — treat those files like secrets because they grant account access; do not paste or store them where untrusted code can read them. (2) The script can read files you point it to (auth and content) and accepts absolute paths — ensure you only pass files you intend it to access. (3) Playwright will download Chromium when you run its install step; run installs in an environment you control (virtualenv/containers) if you prefer isolation. (4) I reviewed the visible parts of the script and SKILL.md and found no unrelated credential requests or external exfil endpoints; however part of the Python file was truncated in the listing. If you want higher confidence, review the full scripts/open_baijiahao_edit.py for any unexpected network calls or hardcoded remote destinations, or run it in an isolated/test account first.Like a lobster shell, security has layers — review code before you run it.
latestvk971x92g4ptvzvbbvhbmmrp4c582jt2r
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
Binspython3