outreach

自动在小红书创作者最新作品下发布引导评论，促进关注或查看私信，支持网页版，操作风险低且可批量执行。

Security Scan

Overall the code implements the stated outreach/commenting functionality, but there are internal inconsistencies (mixed claims about sending private messages vs comments) and the skill reads local session cookies and another skill's output directory—these behaviors are plausible for the task but should be verified before use.

Purpose & Capability

The skill's name/README emphasize web comments, but skill.json description and src/outreach_bot.py also implement private-message (私信) sending. SKILL.md explicitly states private messages are not supported on web and prefers comments, yet code contains a full outreach_bot that tries to find and click '私信' buttons and construct message flows. This internal inconsistency could be benign (two related modes included) but is incoherent and worth confirming with the author.

Instruction Scope

Runtime instructions and code read local files: creators_*.xlsx under a xiaohongshu-creator-finder output directory and a cookie file (.xiaohongshu_cookies.json). The SKILL.md mentions cookie reuse but does not fully document cookie file location or format. The bot will navigate arbitrary creator URLs and drive the browser to post content. No network exfiltration to third-party endpoints is present, but the skill will reuse session cookies and read another skill's output—this crosses skill boundaries and should be confirmed.

Install Mechanism

No installer downloads are embedded; dependencies are standard Python packages (playwright, pandas, openpyxl, rich). The skill is instruction/code-only and does not pull arbitrary remote archives or run external installers beyond the standard 'pip install' and 'playwright install chromium' the README suggests.

Credentials

No environment variables or external credentials are requested, which limits exposure. However the skill expects and loads a local cookies file (session cookies) and will look for another skill's output directory (~/.openclaw/.../xiaohongshu-creator-finder/output). Session cookies are sensitive (they can grant account access) and reading another skill's output implies cross-skill data access—both are explainable by the task but are sensitive and should be approved by the user.

Persistence & Privilege

The skill does not request 'always: true' and does not attempt to modify other skills' configurations. It writes logs and progress files under its own workspace/output and config folders only. Autonomous invocation is allowed (platform default) but not by itself a red flag here.

What to consider before installing

What to check before installing/use: - Confirm the private-message behavior: SKILL.md says web private messages are not supported, but the package contains code to send private messages. Decide whether you intend to allow DM sending or only comment posting. - Session cookies are required: the skill loads a local .xiaohongshu_cookies.json and will reuse cookies from a 'creator-finder' skill folder. Treat that file as highly sensitive—only provide cookies from an account you control and are willing to automate. Do not reuse cookies from high-privilege accounts. - Inspect the cookie file and input Excel before running to ensure they contain only the data you expect. The bot will read creators_*.xlsx from a shared skill workspace path (~/.openclaw/.../xiaohongshu-creator-finder/output) if present. - Test in a safe environment first (non-critical account) and with low daily_limit to verify selectors and behavior; automated posting can lead to platform action if misconfigured. - Review platform Terms of Service and spam/promotion rules; automated outreach may violate rules and risk account suspension. If you want, I can point out exactly where the code reads cookies and input paths, and suggest small code edits to limit the input paths or require an explicit cookie path to make use safer.

小红书创作者评论引流 Skill

名称

xiaohongshu-creator-outreach

描述

自动在创作者最新作品下发表评论，引导对方关注或查看私信。网页版完全支持，风险低。

触发方式

命令触发

/小红书评论引流
/评论创作者
/xhs-comment

自然语言

• "帮我给创作者评论"
• "开始小红书评论引流"

技术说明

为什么用评论而不是私信？

功能	网页版支持	风险	说明
私信	❌ 不支持	高	只能在APP端操作，且风控严格
评论	✅ 完全支持	低	网页版功能完整，可批量操作

评论引流策略：

1. 在创作者最新作品下留下评论
2. 评论内容引导对方查看私信或关注
3. 创作者收到评论提醒，更可能查看私信
4. 零封号风险，可安全批量操作

工作流程

读取Excel → 获取创作者最新作品 → 访问作品页 → 
查找评论框 → 输入评论 → 发送 → 记录状态

输入

自动读取 xiaohongshu-creator-finder/output/ 目录下最新的 creators_*.xlsx 文件。

输出

文件位置

output/comment_YYYYMMDD_HHMMSS.xlsx
output/comment_progress.json（进度文件）

数据字段

字段	说明
创作者ID	用户唯一ID
创作者名称	用户昵称
主页链接	用户主页URL
作品链接	评论的作品URL
评论内容	发送的评论
评论状态	待评论/已评论/评论失败/已跳过
评论时间	评论时间
备注	备注信息

配置说明

编辑 config/settings.json：

{
  "comment_template": "内容很棒！对你的AI作品很感兴趣，已发私信～",
  "daily_limit": 10,
  "min_delay": 3,
  "max_delay": 8
}

参数	说明	默认值
comment_template	评论内容	默认引流语
daily_limit	每日评论上限	10
min_delay	最小延迟（秒）	3
max_delay	最大延迟（秒）	8

注意事项

1. 评论频率 - 建议10-20条/天，避免频繁操作
2. 内容合规 - 评论内容避免敏感词，保持友好
3. Cookie复用 - 自动复用 creator-finder 的登录状态
4. 效果追踪 - 评论后需人工查看对方是否回复或关注

评论模板建议

温和版：

内容很棒！对你的AI作品很感兴趣，已发私信～

直接版：

Hi，看到你的AI作品很有意思，想聊个合作，方便看看私信吗？

专业版：

作品质量很高！我们在做AI短番创作者扶持，有兴趣可以了解下～

依赖

• Python 3.8+
• Playwright
• pandas
• openpyxl

pip install playwright pandas openpyxl
playwright install chromium