小红书发布

小红书发布技能（文字配图版）- 运营执行专员专用

Security Scan

Instructions are a manual, human-in-the-loop posting checklist for 小红书 and do not request code, credentials, or installs—what the skill claims matches what it does.

Purpose & Capability

The name/description (Xiaohongshu post with text+image) matches the SKILL.md: step-by-step UI actions for creating a '文字配图' post. The README's references to sub‑agents and browser-driven operation are consistent with a human-assisted workflow and do not request unexpected binaries or API keys.

Instruction Scope

Runtime instructions only describe UI interactions (click buttons, paste copy, generate images, take screenshots, ask user to confirm). They do not instruct the agent to read arbitrary files, access environment variables, or send data to third‑party endpoints. Note: the skill requires taking and sharing screenshots for user confirmation — avoid including sensitive account/session information in those images.

Install Mechanism

There is no install spec and no code files (instruction-only), so nothing is downloaded or written to disk. This is the lowest-risk install model.

Credentials

The skill does not declare required env vars or credentials, but README and preconditions mention a 小红书 creator account and optional Feishu spreadsheet and sub‑agent configuration. This is operational (human) requirement rather than programmatic credentials; however, users should be aware that account access is needed to actually post and that any additional sub‑agents or integrations (e.g., Feishu) would require their own permissions.

Persistence & Privilege

always:false and no installation actions are requested. The skill does not persist credentials or modify system/agent settings.

Assessment

This is a manual posting checklist for Xiaohongshu and appears coherent and low-risk: it doesn't install code or request API keys. Before using it, confirm you are comfortable granting any human operators or sub‑agents access to your Xiaohongshu account or Feishu sheets; never share passwords or session tokens. When taking screenshots for user confirmation, ensure they don't expose sensitive information (e.g., account settings, saved passwords, or unrelated private data). If you plan to automate steps later, require explicit, minimal credentials and audit any automation code or install scripts first.

小红书发布技能（文字配图版）

完整流程

一、打开发布页 二、选择「上传图文」 三、★ 点击「文字配图」按钮（不要点上传图片） 四、★ 粘贴文案到输入框 五、★ 点击「生成图片」按钮提交（不是回车） 六、等待图片生成完成 七、截图发给用户，选择卡片风格（基础/插图/备忘/边框/便签/简约/涂写/弥散/光影/科技） 八、用户选择后，点击「下一步」 九、填写标题（可选） 十、截图发给用户预览确认 十一、客户确认后，问客户：发布还是暂存 十二、客户选择后，点击「发布」或「暂存离开」

关键规则

1. ★ 顺序不能错：上传图文 → 文字配图 → 粘贴文案 → 生成图片
2. 必须点击「文字配图」按钮，不是上传图片
3. 输入文案后要点「生成图片」按钮，不是回车
4. 等待图片完全生成后再截图
5. ★ 用户选择卡片风格（不是A/B/C/D，是基础/插图/备忘/边框/便签/简约/涂写/弥散/光影/科技）
6. 用户选择卡片风格后要点下一步
7. 发布前必须用户预览确认
8. 客户说可以才能点发布

适用场景

• 用户选择「文字配图」发布
• 用户想要AI自动生成配图