CSDN GEO Draft Publisher

PassAudited by ClawScan on May 13, 2026.

Overview

This skill appears purpose-aligned for generating and filling CSDN drafts, with manual review required before any real publication.

Install only if you are comfortable with a local Playwright script filling a CSDN draft in your visible browser. Review the generated article and the script first, do not include secrets in the input/output content, and only click Save or Publish yourself after checking the draft.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The script can fill or modify draft fields in a logged-in CSDN account; if the platform UI changes, the publish-labeled control could behave differently than expected.

Why it was flagged

The helper controls a visible browser in the user's CSDN editor and opens a publish/settings control. This is aligned with draft filling, but it is still third-party account UI automation and includes an automation-detection suppression flag.

Skill content
browser = p.chromium.launch(headless=False, args=['--disable-blink-features=AutomationControlled']) ... publish_btn.click()
Recommendation

Review the script before running it, keep the browser visible, and consider adding an explicit user confirmation before opening publish settings or removing the automation-detection flag if unnecessary.

What this means

Actions happen inside the user's own CSDN account, so any saved or published draft is attributable to that user.

Why it was flagged

The workflow depends on the user's CSDN account session, but the artifacts clearly say login is manual and session material should not be collected or saved.

Skill content
如未登录,用户需手动登录 ... 不拦截、不读取、不保存 Cookie、LocalStorage、SessionStorage 或 `storage_state`
Recommendation

Use only an account you intend to draft from, run the unmodified visible-browser flow, and do not approve any modified version that saves cookies, passwords, or storage_state.

What this means

Users must supply runtime dependencies themselves, which can introduce risk if installed from untrusted sources.

Why it was flagged

The registry does not declare an install mechanism or required binaries, while the included helper script requires a local Python/Playwright environment. No automatic remote install is shown.

Skill content
No install spec — this is an instruction-only skill; Required binaries ... none
Recommendation

Install Python and Playwright only from trusted sources, and prefer that the publisher document dependency versions and setup steps.