KB Social Publisher

同时发布内容到微博和小红书，使用真实 Chrome 浏览器绕过反机器人检测。支持文字、图片、预览模式和实际发布。当用户需要发布微博、发微博、weibo post、发布小红书、发小红书、xiaohongshu post 时使用此 skill。

Security Scan

The skill's code, instructions, and requirements are coherent with its stated purpose (automating browser-based posts to Weibo and Xiaohongshu); it uses Playwright/Chrome and stores a local profile for login persistence, and there are no unexplained network endpoints or credential requests.

Purpose & Capability

Name/description (post to 微博 and 小红书 using a real Chrome) match the included TypeScript scripts and package.json dependency on Playwright. Required local browser and bun are reasonable for this functionality; no unrelated credentials or services are requested.

Instruction Scope

SKILL.md instructs running the scripts, logging into the sites in the opened browser, and optionally providing local image files and a profile dir. The runtime instructions and the code align: they visit only weibo.com and xiaohongshu publisher pages, prompt for interactive login, and upload local images—no instructions to read unrelated system files or to send data to unexpected endpoints.

Install Mechanism

There is no explicit install spec in the registry metadata (instruction-only), but a package.json is present and lists Playwright; its postinstall runs 'playwright install chromium' which will download browser binaries. This is expected for Playwright-based automation but means network downloads occur during dependency installation.

Credentials

The skill requests no environment variables or external credentials. It does read local files (images) and writes/uses a Chrome user-data/profile directory for session persistence—which is proportional to its need to keep logged-in sessions.

Persistence & Privilege

The skill uses a persistent Chrome profile directory (under the skill dir by default or via --profile) to save login sessions. This is expected for browser automation, but it means cookies/session tokens are stored on disk in that profile directory.

Assessment

This skill appears to do what it says: it launches a real Chrome via Playwright, opens the publisher pages, asks you to log in interactively, and can upload local images and submit posts. Before installing/using it: (1) be prepared that installing dependencies will download Playwright and Chromium; (2) review or run it in an isolated environment if you are concerned about downloaded binaries; (3) note that the tool saves a Chrome profile directory (cookies/session data) under the skill directory by default—if that directory is shared or backed up it could expose your sessions, so consider pointing --profile to a safe location or clearing it when done; (4) confirm you consent to interactive browser login (the script waits for you to press Enter after logging in). If you want extra assurance, inspect the included scripts locally or run them in a sandboxed VM/container.

社交平台发布工具

使用真实 Chrome 浏览器同时发布到微博和小红书，支持文字和图片。

脚本目录

所有脚本位于 scripts/ 子目录。

前置要求

• Google Chrome 或 Chromium 已安装
• bun 已安装
• 首次运行：在打开的浏览器窗口中登录各平台

发布到微博

# 预览模式（不发布）
npx -y bun ${SKILL_DIR}/scripts/social-publisher.ts --weibo "你好，微博！"

# 带图片
npx -y bun ${SKILL_DIR}/scripts/social-publisher.ts --weibo "看这张图！" --image ./photo.png

# 实际发布
npx -y bun ${SKILL_DIR}/scripts/social-publisher.ts --weibo "发布微博！" --image ./photo.png --submit

发布到小红书

# 预览模式（不发布）
npx -y bun ${SKILL_DIR}/scripts/social-publisher.ts --xhs "你好，小红书！" --image ./photo.png

# 实际发布
npx -y bun ${SKILL_DIR}/scripts/social-publisher.ts --xhs "发布小红书！" --image ./photo.png --submit

同时发布到微博和小红书

# 预览模式
npx -y bun ${SKILL_DIR}/scripts/social-publisher.ts --weibo "你好！" --xhs "你好！" --image ./photo.png

# 实际发布
npx -y bun ${SKILL_DIR}/scripts/social-publisher.ts --weibo "同时发布！" --xhs "同时发布！" --image ./photo.png --submit

参数说明

参数	描述
--weibo <text>	微博内容
--xhs <text>	小红书内容
--image <path>	图片路径（可重复）
--submit	实际发布（默认：仅预览）
--profile <dir>	自定义 Chrome 配置目录

注意事项

• 首次运行需要手动登录各平台（会话会保存）
• 总是先用预览模式确认，再使用 --submit
• 小红书至少需要 1 张图片
• 微博普通帖子限制 2000 字
• 支持 macOS、Linux 和 Windows