Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Chinese Content Generator

v1.0.0

中文社交媒体内容生成器。一键生成适合掘金/知乎/公众号/小红书的文章、标题、摘要。支持热点追踪、SEO优化。

0· 171·0 current·0 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for yang1002378395-cmyk/chinese-content-generator.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Chinese Content Generator" (yang1002378395-cmyk/chinese-content-generator) from ClawHub.
Skill page: https://clawhub.ai/yang1002378395-cmyk/chinese-content-generator
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install chinese-content-generator

ClawHub CLI

Package manager switcher

npx clawhub@latest install chinese-content-generator
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
The name/description (Chinese social-media content generator, trending, SEO) align with the included scripts (generate.js, optimize-title.js, trending.js). However the SKILL.md references additional scripts (adapt.js, setup-ai.js) that are not present, and the README/config suggestions (editing ~/.openclaw/skills/.../config.json) do not match how the code actually reads configuration. These packaging mismatches warrant caution.
!
Instruction Scope
SKILL.md instructs running node scripts under ~/.openclaw/skills/..., which matches present files, but the scripts read ~/.openclaw/.env for DEEPSEEK_API_KEY despite the metadata claiming no required env vars. The instructions also point to adapt.js and setup-ai.js that are missing. The skill reads a user-home .env file (outside the skill directory), which can contain secrets — the runtime scope is broader than the documentation declares.
Install Mechanism
No install spec or remote downloads are present; this is an instruction-plus-source package. No installer downloads arbitrary code from external URLs, which lowers install-time risk.
!
Credentials
Package metadata declares no required environment variables, but both generate.js and optimize-title.js read CONFIG_PATH = ~/.openclaw/.env and expect DEEPSEEK_API_KEY. That is a clear mismatch: the skill will access an API key file (and thus potentially other secrets in that file) even though nothing in the registry metadata or SKILL.md declares this requirement. Requiring an API key for the DeepSeek provider is plausible, but it should be documented and scoped explicitly.
Persistence & Privilege
The skill does not request always:true, does not modify other skills or system config, and does not persist credentials itself. It only reads ~/.openclaw/.env and performs outbound HTTPS calls to api.deepseek.com and api.juejin.cn.
What to consider before installing
This skill appears to implement the content-generation features it advertises, but there are packaging and documentation inconsistencies you should resolve before running it: - Do not run these scripts until you inspect the code locally. The scripts read ~/.openclaw/.env for DEEPSEEK_API_KEY even though the skill metadata declares no required env vars — put a dedicated test key in a separate file if you must test. - The SKILL.md refers to adapt.js and setup-ai.js which are not included. Ask the publisher why those files are missing or if the package is incomplete. - Because the code reads ~/.openclaw/.env (a file in your HOME), ensure that file does not contain other unrelated secrets you care about. Prefer adding only the minimal API key (DEEPSEEK_API_KEY) or temporarily setting an env var for testing instead of placing many secrets in that file. - Verify the remote endpoints (api.deepseek.com, api.juejin.cn) and consider running the scripts in a controlled environment (container or VM) to inspect network traffic and ensure no unexpected exfiltration. - Treat the Pro-contact instructions (QQ) as out-of-band sales info; do not share secrets when requesting upgrades. If the publisher confirms the missing files are unnecessary and documents DEEPSEEK_API_KEY explicitly (or changes the code to accept an env var or credential declared in metadata), the inconsistencies would be resolved and risk reduced.

Like a lobster shell, security has layers — review code before you run it.

chinesevk97dwqww0sr0w32csger6br4p983gxkdcontentvk97dwqww0sr0w32csger6br4p983gxkdlatestvk97dwqww0sr0w32csger6br4p983gxkd
171downloads
0stars
1versions
Updated 1mo ago
v1.0.0
MIT-0

中文社交媒体内容生成器

专为中文内容创作者设计。一键生成适合各大平台的高质量内容,提升写作效率 10x。

功能

  • ✍️ 多平台适配 - 掘金/知乎/公众号/小红书一键切换
  • 🔥 热点追踪 - 抓取实时热点,快速产出
  • 📊 SEO优化 - 标题/关键词自动优化
  • 💡 创意建议 - 不知道写什么?给你灵感

安装

npx clawhub@latest install chinese-content-generator

使用方法

1. 生成文章

node ~/.openclaw/skills/chinese-content-generator/generate.js --topic "DeepSeek V3 实战" --platform juejin

输出示例:

📝 标题:DeepSeek V3 实战:我用 1 块钱完成了 100 块钱的活
📊 分类:后端 / AI
🏷️ 标签:DeepSeek, AI, 降本增效

摘要(50字):
DeepSeek V3 比GPT-4便宜100倍,我用它完成了代码生成、文档写作、数据分析等任务,真实体验分享。

正文大纲:
1. 背景:为什么尝试 DeepSeek
2. 实战:3个真实场景
   - 代码生成:重构一个 React 组件
   - 文档写作:API 文档自动生成
   - 数据分析:Excel 数据清洗
3. 成本对比:¥1 vs ¥100
4. 总结:适合什么场景

💡 建议:
- 标题加数字更吸引点击
- 开头 50 字决定打开率
- 配图建议:对比图表、代码截图

2. 抓取热点

node ~/.openclaw/skills/chinese-content-generator/trending.js

输出:

🔥 今日热点(掘金)
1. DeepSeek V3 发布 - 热度 9800
2. Claude 3.7 新功能 - 热度 7500
3. React 19 正式版 - 热度 6200
4. Tailwind CSS v4 - 热度 5400

🔥 今日热点(知乎)
1. AI 会取代程序员吗?
2. 2026 年前端方向
3. DeepSeek vs GPT-4

3. 标题优化

node ~/.openclaw/skills/chinese-content-generator/optimize-title.js "DeepSeek V3 使用教程"

输出:

📊 原标题:DeepSeek V3 使用教程
❌ 问题:太平淡,无吸引力

✅ 优化建议:
1. DeepSeek V3 教程:省下 90% API 费用(强调收益)
2. 我用 DeepSeek V3 替代了 GPT-4,真香(故事性)
3. DeepSeek V3 完整指南:从入门到精通(权威感)
4. 程序员必备:DeepSeek V3 踩坑实录(痛点)

💡 推荐选择:标题 2(故事性强,点击率高)

4. 平台适配

node ~/.openclaw/skills/chinese-content-generator/adapt.js --input article.md --platform xiaohongshu

自动调整:

  • 标题长度(小红书 ≤ 20 字)
  • 正文结构(小红书分段 + emoji)
  • 标签数量(小红书 5-10 个)

平台特性

平台标题长度正文字数特点
掘金≤ 50字800-3000技术深度,代码示例
知乎≤ 40字1500-5000长文,专业感
公众号≤ 30字1500-3000标题党,开头 50 字关键
小红书≤ 20字500-1000emoji,分段,图片

实战案例

案例 1:技术文章(掘金)

输入:DeepSeek V3 体验 输出

  • 标题:DeepSeek V3 深度体验:比 GPT-4 便宜 100 倍,效果如何?
  • 阅读量预测:5000-10000
  • 推荐时间:工作日 9:00-11:00

案例 2:知识分享(知乎)

输入:AI 编程工具对比 输出

  • 标题:2026 年 AI 编程工具横评:Cursor、Copilot、DeepSeek 谁最强?
  • 阅读量预测:10000-30000
  • 推荐时间:周末 20:00-22:00

配置

编辑 ~/.openclaw/skills/chinese-content-generator/config.json

{
  "default_platform": "juejin",
  "api_provider": "deepseek",
  "language": "zh-CN",
  "style": "professional",
  "max_title_length": 50
}

API 提供商

支持以下 AI 模型生成内容:

  • DeepSeek V3(推荐,性价比最高)
  • 智谱 GLM-4(中文能力强)
  • 通义千问(多模态)

💬 Pro 版本(¥199)

免费版(当前)

  • 基础内容生成
  • 平台适配
  • 标题优化

Pro 版(¥199)

  • ✅ 批量生成(100+ 篇/天)
  • ✅ 热点自动追踪
  • ✅ 数据分析(阅读量预测)
  • ✅ SEO 关键词优化
  • ✅ 图片生成建议
  • ✅ 1年更新支持

联系方式

  • QQ: 1002378395(中国用户)
  • Telegram: 待注册(海外用户)

添加 QQ 1002378395,发送"内容生成"获取 Pro 版信息


License

MIT(免费版) Pro 版:付费后可用

Comments

Loading comments...