Zhihu Geo Draft Assistant

PassAudited by ClawScan on May 13, 2026.

Overview

This skill appears to be a disclosed Zhihu draft-prep tool, not an auto-publisher, but it uses a visible browser logged into your account and requires careful human review before publishing.

Before installing, understand that this skill helps draft and fill Zhihu content but does not publish automatically. Install Playwright from trusted sources, run the browser automation only while watching it, manually review all generated content for accuracy and disclosure, and personally decide whether to save or publish.

Findings (4)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

The skill can operate inside a live Zhihu editing page, so mistakes could affect a draft if the user later saves or publishes it.

Why it was flagged

The script controls a visible browser, can click the Zhihu 'write answer' button, and inserts text into the editor. This is expected for a draft-filling assistant and does not include automatic publishing.

Skill content
browser = p.chromium.launch(headless=False) ... page.locator('button:has-text("写回答")').first.click(timeout=5000) ... document.execCommand('insertText', false, text)
Recommendation

Run the script only when you are present, review the filled content and formatting, and manually decide whether to save or publish.

What this means

The script runs in the context of your Zhihu account, even though it does not appear to steal or persist login data.

Why it was flagged

The workflow depends on the user's Zhihu account session in a local browser. The code asks for manual login but does not show credential, cookie, or storage-state capture.

Skill content
input("【等待人工介入】请在浏览器中扫码或输入密码登录知乎。完成后,在终端按下 Enter 键继续...")
Recommendation

Use a trusted local environment, watch the browser while it runs, and close the browser when finished.

What this means

Installing external packages or browser binaries can introduce normal dependency supply-chain risk.

Why it was flagged

The skill has no install spec but documents a manual external dependency install for Playwright and browser binaries. This is central to the stated browser automation purpose but is not pinned or enforced by metadata.

Skill content
确保已安装 Python 环境及 Playwright (`pip install playwright` 然后 `playwright install`)
Recommendation

Install Playwright from official package sources, preferably in a virtual environment, and verify dependency versions if used in a sensitive environment.

What this means

Generated content may present brand-related material in a less obvious promotional style, which could create platform or reader trust concerns if used irresponsibly.

Why it was flagged

The prompt explicitly creates a lower-advertising version partly to avoid being folded or classified as marketing. This is aligned with the skill's content-marketing purpose, but users should be aware of disclosure and platform-rule implications.

Skill content
当知乎问题具有较高的封禁风险,或发布账号权重较低,为避免被折叠或判定为营销内容时,应当使用本版本。
Recommendation

Ensure any promotional or affiliated content follows Zhihu rules and applicable disclosure expectations, and do not use the skill for spam or deceptive posting.