内容自动发布

自动发布内容到多个平台，支持微信公众号、微博、知乎等平台定时发布。

Security Scan

The skill claims to autonomously post and aggregate data across multiple platforms but provides no concrete runtime instructions, credentials, or integration details — that mismatch is suspicious and needs clarification before use.

Purpose & Capability

The description promises automated posting to WeChat, Weibo, Zhihu, etc., scheduling, and analytics, but the package declares no required credentials, no API keys, and no integration endpoints. Real posting requires platform-specific auth (OAuth/API keys) and network calls; those are absent, so the declared purpose does not align with what's requested or specified.

Instruction Scope

SKILL.md is high-level marketing-style documentation (inputs/outputs/examples) without concrete runtime steps (which APIs to call, how to authenticate, where data is sent). The instructions are vague and give the agent broad discretion to 'adapt content' and 'publish' without boundaries — this could lead the agent to request or use credentials in ad-hoc ways.

Install Mechanism

There is no install spec and no code files (instruction-only). That minimizes on-disk risk because nothing is downloaded or installed, which is expected for a pure instructions skill.

Credentials

No environment variables, config paths, or primary credential are declared even though posting to external platforms requires credentials. The lack of declared credentials is disproportionate to the claimed functionality and suggests missing or hidden steps for obtaining auth.

Persistence & Privilege

always:false and no install means the skill does not request persistent system presence. The skill is user-invocable and can be invoked autonomously (default), which is normal — but combined with the other concerns, autonomy could increase risk if the agent is later asked to gather credentials.

What to consider before installing

Do not install or provide credentials yet. Ask the publisher for: (1) source/homepage and contact information; (2) concrete integration details — which APIs/endpoints are used and whether OAuth or token-based auth is required; (3) what credentials the skill will ask for and how/where they are stored; (4) a privacy/data-retention policy and whether posts or tokens are sent to a third-party service (the listing charges ¥49/month but gives no SaaS info). If you test, use a throwaway/demo account and never share your main platform passwords. Prefer skills that declare required env vars, show exact API calls, or provide audited code or an official integration page.

Content Auto Poster 📝

自动将一篇内容发布到多个平台，省时省力。

功能

• 📱 多平台支持: 微信公众号、微博、知乎、简书
• ⏰ 定时发布: 设置最佳发布时间
• 📊 数据统计: 阅读量、点赞、评论汇总
• 🔄 内容适配: 自动调整格式适配各平台

输入

• 内容标题
• 正文内容
• 目标平台列表
• 发布时间（可选）

输出

{
  "success": true,
  "posts": [
    {"platform": "wechat", "url": "https://...", "status": "published"},
    {"platform": "zhihu", "url": "https://...", "status": "scheduled"}
  ],
  "total_reach": 1250
}

使用场景

• 博客同步到多个平台
• 产品发布公告
• 定期内容更新

配置

{
  "platforms": ["wechat", "zhihu", "jianshu"],
  "default_schedule": "09:00",
  "timezone": "Asia/Shanghai"
}

价格

¥49/月