多平台内容自动发布

多平台内容自动发布。支持知乎回答/文章、小红书图文笔记一键发布。

Security Scan

The skill's code, instructions, and requirements are coherent with its stated purpose (automating Zhihu and Xiaohongshu posts via browser automation); it stores cookies locally and uses Playwright but does not show signs of unrelated credential access or external exfiltration.

Purpose & Capability

The name/description (multi-platform publisher for Zhihu and Xiaohongshu) matches the included scripts (zhihu_publish.js, xiaohongshu_publish.js). Both scripts implement browser automation to publish answers/articles/notes and persist cookies under ~/.qclaw — all of which are expected for this functionality.

Instruction Scope

SKILL.md and the scripts instruct the agent to open pages, paste content via the clipboard, upload images, click publish, and persist cookies to ~/.qclaw/*. This stays within the publisher's scope. The scripts explicitly attempt anti-detection measures (disable webdriver flag, set custom User-Agent, override navigator properties) — these are consistent with the author's goal to avoid bot detection but are noteworthy because they attempt to circumvent site protections and could increase account risk or violate platform TOS.

Install Mechanism

There is no install spec, but package.json / package-lock.json declare a dependency on Playwright. Installing or running the skill will require installing Playwright, which in turn downloads browser binaries (and the lockfile points to a mirror registry). This is proportionate to browser automation, but installing Playwright downloads large native browser artifacts from the network — the user should be aware of that.

Credentials

The skill requests no environment variables or external credentials. It uses process.env.HOME to build cookie file paths and persists cookies locally to ~/.qclaw/zhihu_cookies.json and ~/.qclaw/xiaohongshu_cookies.json. That is necessary for session reuse, but these cookie files are sensitive and grant account access if stolen — the behavior is expected but merits caution.

Persistence & Privilege

always:false (normal). The skill persists its own cookie files under ~/.qclaw, which is within its scope. It does not modify other skills or system-wide agent settings. Be aware that cookie persistence gives the skill continued access to logged-in sessions on the local machine until cookies are removed.

Assessment

This skill appears to do what it says: it automates Chrome via Playwright to publish to Zhihu and Xiaohongshu and stores login cookies under ~/.qclaw. Things to consider before installing: (1) Playwright installation will download browser binaries from the registry mirror — review and install in a controlled environment if concerned. (2) Cookie files are sensitive: if you use your real accounts, the saved ~/.qclaw/*.json files can be used to impersonate you — store them securely or use a throwaway account. (3) The scripts include anti-detection tweaks (disabling webdriver, custom UA), which may violate site terms and increase ban risk; use at your own risk. (4) Run the code in an isolated VM/container if you want to limit impact, and inspect the files and network activity during a first run. If you need higher assurance, ask the author for a signed release or audit the code yourself before use.

功能概述

一键将内容发布到知乎或小红书，告别重复操作。

支持平台：

• 知乎（回答 + 文章）
• 小红书（图文笔记）

⚠️ 微信公众号暂不支持：微信官方明确禁止自动化发布，有封号风险

使用方法

发布知乎回答

帮我把以下内容发布到知乎问题 https://www.zhihu.com/question/xxx：
[你的内容]

发布知乎文章

帮我在知乎发布一篇文章，标题是"xxx"，内容如下：
[你的内容]

发布小红书笔记

帮我在小红书发布一篇笔记，标题是"xxx"，内容如下：
[你的内容]

执行流程

知乎回答发布

1. 用户提供：问题URL + 回答内容
2. 使用浏览器自动化打开问题页面
3. 点击"写回答"按钮
4. 通过剪贴板粘贴写入内容（Draft.js编辑器兼容）
5. 点击"发布回答"
6. 返回发布结果和链接

知乎文章发布

1. 用户提供：文章标题 + 文章内容
2. 使用浏览器自动化打开写作页面
3. 填写标题和正文
4. 点击"发布"
5. 返回发布结果和链接

小红书笔记发布

1. 用户提供：笔记标题 + 正文 + 图片路径（可选）
2. 使用浏览器自动化打开小红书创作者页面
3. 上传图片（如有）
4. 填写标题和正文
5. 点击"发布"
6. 返回发布结果

前置条件

• 需要用户已在浏览器中登录知乎/小红书账号
• Cookie持久化存储在 ~/.qclaw/zhihu_cookies.json 或 ~/.qclaw/xiaohongshu_cookies.json
• 首次使用会检测登录状态，如未登录会提示用户手动登录

注意事项

• 发布频率建议：知乎每天不超过2篇，小红书每天不超过3篇
• 内容必须符合平台规则，避免违规
• 首次发布前请确认已登录对应平台

技术实现

• 浏览器自动化：Playwright + Chrome
• 内容写入：剪贴板粘贴（兼容Draft.js/TipTap等虚拟编辑器）
• 反检测：禁用WebDriver标识、自定义User-Agent
• Cookie持久化：JSON文件存储