Toutiao Graphic Publisher
v1.0.1Automatically publishes graphic content on Toutiao through browser automation, supporting intelligent formatting, automatic generation of popular tags, and t...
⭐ 1· 274·1 current·1 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name and description (automatic publishing on Toutiao via browser automation) match the SKILL.md: it contains step-by-step instructions for visiting mp.toutiao.com, detecting login, formatting content, generating tags, and clicking publish. It does not request unrelated credentials, binaries, or system paths.
Instruction Scope
Instructions remain within the publishing workflow and reference only Toutiao web pages and editor interactions. They do assume the agent can control a browser (navigate pages, click editor buttons, fill fields). This is expected, but note the agent will operate on the user's account session (after QR login) and will perform publish actions on behalf of the user.
Install Mechanism
No install spec or code files are present (instruction-only). Nothing is downloaded or written to disk by the skill itself.
Credentials
The skill requires no environment variables, credentials, or config paths. Its behavior (browser automation to the Toutiao web UI) does not require additional secrets, so requested privileges are proportionate.
Persistence & Privilege
always is false and the skill does not request persistent system changes. However, because autonomous invocation is allowed by default, the agent could run this skill and publish content without further manual approval if the agent is configured to do so — this is a platform behavior rather than a property of the skill itself.
Assessment
This skill appears coherent for automating posts to your Toutiao account, but consider the following before enabling it: (1) It controls your browser session after you log in via QR code — only grant it if you trust the agent and runtime environment. (2) Because it can publish automatically, verify whether your agent will require confirmation before posting; test with a throwaway account or draft content first. (3) No credentials or installs are required, but the skill will send your article content to mp.toutiao.com (the target site) — avoid including sensitive data. (4) If you need stricter controls, disable autonomous invocation or require manual confirmation for publish actions.Like a lobster shell, security has layers — review code before you run it.
latestvk976c46dqav4ma5mzca3fc0zb183fd8d
License
MIT-0
Free to use, modify, and redistribute. No attribution required.