Temp Xhs Skill
v1.0.0通过小红书网页端发布笔记。支持纯文字长文笔记发布、图文笔记，视频笔记，定时发布、草稿管理、评论回复等完整功能。触发场景：(1) 发布小红书笔记 (2) 发布日记/文章到小红书 (3) 将内容发布到小红书 (4) 回复小红书评论 (5) 管理小红书笔记 (6) 查看小红书数据
⭐ 1· 88·1 current·1 all-time
by@wuritu
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description (publish/manage Xiaohongshu notes) matches the SKILL.md content: step-by-step browser workflows for long-text, image, video posts, scheduling, drafts, replies and analytics. No unrelated credentials, binaries, or installs are requested.
Instruction Scope
The instructions stay within the publishing/management domain (browser login, using creator.xiaohongshu.com, templates, reply rules). They do, however, instruct keeping a browser profile logged in and re-displaying a QR code on login expiry (reasonable for a browser-driven workflow). The only notable scope expansion is a specific local backup path for drafts (E:\OpenClaw\agents\ceo\memory\xhs-drafts.md), which implies the agent or user should write drafts to disk; that action is relevant to draft management but is not declared elsewhere.
Install Mechanism
No install spec or code files — instruction-only. No downloads or package installs are requested, which minimizes installation risk.
Credentials
The skill declares no environment variables or credentials (appropriate). It does reference a concrete local backup file path on E: (agent memory path). This implies the agent may write user content to disk (potential privacy risk) even though no config path was formally declared. Review and control any file-write permissions if the agent will act on these instructions.
Persistence & Privilege
always:false and default autonomous invocation are set (normal). The skill does not request persistent system-wide privileges or modification of other skills/configs.
Assessment
This skill is a textual how-to for using the Xiaohongshu web creator — it appears coherent and contains no hidden network endpoints or required secrets. Before installing/using: (1) Note the SKILL.md advises saving drafts to a specific local path (E:\OpenClaw\agents\ceo\memory\xhs-drafts.md) — confirm you are comfortable with the agent or user writing content there and adjust the path if needed. (2) If you plan to let an agent automate browser actions, ensure the browser session and QR-based login flow are protected (do not expose account credentials), and avoid granting blanket disk or system permissions unless necessary. (3) The skill requests no external credentials, but any automation that performs replies or posts will use your logged-in account — be deliberate about granting automation rights. If you want extra assurance, request the publisher to remove or parameterize the hard-coded backup path.Like a lobster shell, security has layers — review code before you run it.
latestvk97bc49p5w4j80v58dv3h90eah83tba2
License
MIT-0
Free to use, modify, and redistribute. No attribution required.