Skill flagged — suspicious patterns detected
ClawHub Security flagged this skill as suspicious. Review the scan results before using.
csdn文章发布
v1.0.4将 Markdown 文章通过用户目录浏览器会话发布到 CSDN。支持保存草稿、预览排版、人工确认发布;默认保持浏览器打开并复用登录态。
⭐ 1· 98·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description match the code: the script reads a Markdown file, optionally appends a QR section from skill-config.json, opens a persistent Playwright Chromium context pointed at a browser profile directory to reuse login state, fills the editor, interacts with publish/save/preview buttons, screenshots the page, and emits a JSON result. Requesting access to a browser profile is coherent with 'reuse login session'.
Instruction Scope
Runtime instructions and the script stay within publishing scope: they read only the provided Markdown file and the skill's skill-config.json, operate in the browser editor page, and output a screenshot and JSON. Important scope notes: the script will open and reuse a browser profile (accessing cookies/session data in that profile) and will keep the browser process open by default (process.stdin.resume). It also uses heuristics (DOM selectors) to find editor fields, which may require updates if the site changes.
Install Mechanism
There is no install spec yet the script requires Node and the Playwright package (require('playwright')). The skill does not declare these runtime dependencies or how to install them; without them the script will fail. This lack of declared install steps is a practical coherence gap (not necessarily malicious) that the user should address before running.
Credentials
The skill requests no external secrets or environment variables. It reads env-like values only from its own skill-config.json (CSDN_VERTICAL_QR_IMAGE_URL/CSDN_VERTICAL_QR_DESCRIPTION) to build the QR section — this is proportional to its publishing purpose.
Persistence & Privilege
always is false and the skill does not request to persist or modify other skills or system-wide agent settings. Its behavior of keeping the browser open and reusing the user's profile is a functional feature, not an elevated platform privilege; still, it has privacy implications (see guidance).
Assessment
What to consider before installing/running:
- Dependencies: the script requires Node.js and the 'playwright' package (and a compatible Chromium build). The skill provides no install instructions — install Playwright yourself (npm i playwright) or provide an install spec first.
- Browser profile access: the script intentionally opens your browser's profile directory to reuse login cookies. That gives it access to all sessions and cookies stored in that profile. Only run it on a browser profile you are comfortable exposing (recommend creating/using a dedicated profile for this skill).
- Platform assumptions: default profile-path resolution targets macOS (Library/Application Support). On Linux/Windows you must pass --profile-dir explicitly or adjust the script.
- Privacy: the skill takes a screenshot of the editor and prints the current page URL to stdout. If that contains sensitive details, consider where outputs are stored and who can see them.
- Operation: by default the script keeps the browser process open (keeps the session alive); it will not exfiltrate data by itself, but it interacts with the live browser context — review the script if you have concerns.
- Configuration: check skill-config.json for the QR image URL and description before use to avoid adding unwanted content.
Recommended actions: inspect/verify the included script locally, run it with a dedicated browser profile, install Playwright in a controlled environment, and if you need broader platform support add or pass an explicit --profile-dir. If you want an install step, add a package.json and an install spec so dependencies are explicit.Like a lobster shell, security has layers — review code before you run it.
latestvk97erwz6fmwqcmm0t571ghd23x84dzhw
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
