content-matrix-publisher
v1.0.0智能内容矩阵分发 Combo —— 一键生成多平台内容并自动分发。解决内容创作者"一鱼多吃"的效率痛点，将单次创作转化为小红书图文、公众号文章、视�
⭐ 0· 42·0 current·0 all-time
Security Scan
OpenClaw
Suspicious
high confidencePurpose & Capability
The skill claims to publish to platforms (小红书, 公众号) and orchestrate discovery/summarization, which matches its purpose, but the package metadata lists no required env vars, credentials, or binaries. SKILL.md and README explicitly instruct users to provide a xiaohongshu web_session cookie and WeChat appid/secret and to install dependent skills (agent-reach, xiaohongshu-mcp, wechat-article-pro). Scripts call external CLIs (agent-reach, xiaohongshu-mcp, wechat-article-pro) and jq. Those dependencies are expected for the purpose but are not declared — an incoherence that could surprise users and lead to misconfiguration or accidental credential exposure.
Instruction Scope
Runtime instructions and scripts perform network discovery (agent-reach searches multiple platforms), content extraction, and invoke platform-publishing CLIs. SKILL.md tells users to store sensitive credentials in ~/.openclaw/config.yaml. Scripts write temporary output to /tmp and call other skills/CLIs. The instructions therefore reach beyond pure text generation: they require web access, call external tools, and handle credentials — none of which are reflected in the declared requirements. The workflow.json also includes webhook and scheduled triggers (HTTP cron), which broaden the runtime scope.
Install Mechanism
No install spec / no remote downloads are present (instruction-only with bundled scripts/templates), which reduces install-time risk. The included helper scripts will be written to disk when the skill is installed, but there are no downloads from external URLs or archive extraction in the package itself.
Credentials
The package metadata lists no required environment variables or primary credential, yet SKILL.md and README instruct storing sensitive credentials (xiaohongshu web_session cookie, WeChat appid/secret) in the user's ~/.openclaw/config.yaml and scripts expect platform CLIs to be available. This mismatch is problematic: the skill will need secrets to actually publish, but the platform metadata gives no upfront signal. Also, scripts expect jq and other CLIs that are not declared. Requesting cookies/app secrets for publishing is proportionate to the stated purpose, but failing to declare them is an availability/visibility concern and could lead to accidental credential exposure.
Persistence & Privilege
always:false (no forced inclusion) and disable-model-invocation:false (normal). workflow.json defines scheduled cron triggers and a webhook trigger, and config/default.yaml enables schedule:true by default. That means the skill can be configured to run unattended (scheduled/webhook). Auto-publish is false by default in examples (good), but configuration allows enabling auto_publish — review that setting carefully to avoid unintended autonomous posting.
What to consider before installing
This skill implements a plausible multi-platform publishing workflow but its metadata is inconsistent with its runtime needs. Before installing or enabling it:
- Expect to provide sensitive credentials (xiaohongshu web_session cookie, WeChat appid/secret) in your ~/.openclaw/config.yaml — do not store secrets you are not comfortable exposing. The skill metadata does not declare these requirements, so you must add them manually.
- The scripts call other CLIs/skills (agent-reach, xiaohongshu-mcp, wechat-article-pro) and use jq; ensure you only install trusted implementations of those tools. Verify the xiaohongshu/wechat publisher CLIs are legitimate and review their code/config handling.
- By default publish.sh runs in DRY RUN mode; test thoroughly in dry-run before enabling auto_publish.
- Scheduled and webhook triggers exist; keep auto_publish disabled unless you want unattended publishing. If you enable scheduling or webhooks, review what network endpoints and credentials will be used and whether the webhook exposes a public endpoint.
- Because the package doesn’t declare required env vars or binaries, inspect and validate the config files and scripts yourself (especially where credentials are read/stored) and consider running in an isolated/test environment first.
If you want more confidence, ask the skill author to: (1) declare required credentials and binaries in metadata, (2) avoid storing raw cookies/app secrets in plain config or provide clear guidance about secure storage, and (3) confirm which external CLIs/skills are required and where they come from.Like a lobster shell, security has layers — review code before you run it.
latest
content-matrix-publisher
Skill Combo ID: content-matrix-publisher
版本: 1.0.0
作者: OpenClaw Agent
创建日期: 2026-03-25
简介
智能内容矩阵分发 Combo —— 一键生成多平台内容并自动分发。解决内容创作者"一鱼多吃"的效率痛点，将单次创作转化为小红书图文、公众号文章、视频脚本的矩阵内容。
业务场景
痛点分析：
- 内容创作者需要同时运营小红书、公众号、B站等多个平台
- 手动适配每个平台的内容格式耗时耗力
- 缺乏系统化的热点追踪和选题策略
- 发布后缺乏数据反馈闭环
解决方案：自动化内容矩阵工作流，从热点发现到多平台发布的一站式解决方案。
Skill 编排图谱
┌─────────────────────────────────────────────────────────────────────────────┐
│ 智能内容矩阵分发工作流 │
└─────────────────────────────────────────────────────────────────────────────┘
┌──────────────┐ ┌──────────────┐ ┌──────────────┐
│ agent-reach │ ──▶ │ summarize │ ──▶ │ 本地创作 │
│ (热点搜索) │ │ (内容提炼) │ │ (核心文案) │
└──────────────┘ └──────────────┘ └──────────────┘
│
┌───────────────────────────────┼───────────────────────────────┐
▼ ▼ ▼
┌──────────────────┐ ┌──────────────────┐ ┌──────────────────┐
│ xiaohongshu-mcp │ │ card-renderer │ │ 公众号助手 │
│ (小红书发布) │ │ (知识卡片配图) │ │ (公众号文章) │
└──────────────────┘ └──────────────────┘ └──────────────────┘
│ │ │
└───────────────────────────────┴───────────────────────────────┘
▼
┌──────────────────┐
│ 发布报告汇总 │
│ (数据追踪反馈) │
└──────────────────┘
参与 Skills：
| Skill | 角色 | 功能 |
|---|---|---|
agent-reach | 数据采集 | 多平台热点搜索（小红书、微博、知乎、Twitter等） |
summarize | 内容提炼 | 热点内容摘要、核心观点提取 |
xiaohongshu-mcp | 平台分发 | 小红书图文发布 |
card-renderer | 视觉增强 | 生成知识卡片配图 |
公众号助手 | 平台分发 | 微信公众号文章发布 |
工作流步骤
Phase 1: 热点发现 (5分钟)
# 使用 agent-reach 搜索热点
agent-reach search xiaohongshu --query "AI 办公效率" --limit 10
agent-reach search weibo --query "科技热点" --limit 5
Phase 2: 内容提炼 (3分钟)
# 使用 summarize 提取核心内容
summarize https://xiaohongshu.com/note/xxx --format markdown
Phase 3: 核心文案创作 (10分钟)
# 基于热点生成原创内容
- 标题：[吸引眼球的标题]
- 核心观点：[3个要点]
- 案例/数据：[支撑内容]
- 行动召唤：[引导互动]
Phase 4: 多平台适配发布
小红书版本：
- 使用
card-renderer生成封面图 - 使用
xiaohongshu-mcp发布图文
公众号版本：
- 使用
公众号助手生成 3000-5000 字深度文章 - 自动 AI 配图
使用示例
示例 1: 日常热点追踪发布
用户: 帮我生成今天的 AI 行业热点内容，分发到小红书和公众号
Agent 执行:
1. [agent-reach] 搜索小红书/微博 AI 热点
2. [summarize] 提炼 TOP3 热点核心内容
3. [本地创作] 生成原创文案
4. [card-renderer] 生成小红书封面图
5. [xiaohongshu-mcp] 发布小红书图文
6. [公众号助手] 发布公众号文章
7. [汇总报告] 返回发布链接和数据追踪建议
示例 2: 选题深度挖掘
用户: 我想写一篇关于"AI 编程助手"的深度内容
Agent 执行:
1. [agent-reach] 搜索 GitHub/Bilibili/知乎相关内容
2. [summarize] 整理竞品分析和用户反馈
3. [本地创作] 生成差异化选题角度
4. [多平台适配] 输出小红书笔记 + 公众号文章框架
配置说明
必需配置
# ~/.openclaw/config.yaml
skills:
agent-reach:
enabled: true
xiaohongshu-mcp:
web_session: "your_xiaohongshu_cookie"
公众号助手:
appid: "your_wechat_appid"
secret: "your_wechat_secret"
可选配置
content-matrix-publisher:
default_platforms:
- xiaohongshu
- wechat_official
auto_image: true
publish_schedule: "09:00, 12:00, 18:00"
安全注意事项
- 内容原创性: 避免直接复制热点内容，确保二次创作
- 平台合规: 遵守各平台内容发布规范
- 敏感词过滤: 发布前进行内容审核
- 发布频率: 避免短时间大量发布触发风控
错误处理
| 错误场景 | 处理策略 |
|---|---|
| 热点搜索失败 | 回退到本地选题库 |
| 图片生成失败 | 使用预设模板图 |
| 小红书发布限流 | 延迟重试或转存草稿 |
| 公众号审核失败 | 人工介入修改 |
扩展性
可扩展的平台：
- B站视频脚本生成
- 抖音文案适配
- LinkedIn 专业文章
- Twitter/X 短内容
更新日志
- v1.0.0 (2026-03-25): 初始版本，支持小红书 + 公众号双平台分发
Comments
Loading comments...