Redbook Browser Ops
v0.1.1Publish and manage Xiaohongshu (RED/小红书) content via browser automation with confirm-before-publish safety. Trigger when users say things like “发小红书/发笔记/保存草稿...
⭐ 3· 931·7 current·7 all-time
byLucas@yikailucas
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description match the SKILL.md: it automates publishing, drafting, replies, and metrics on creator.xiaohongshu.com. It does not ask for unrelated binaries, cloud credentials, or config paths—everything requested is proportionate to a browser-automation publishing task.
Instruction Scope
Instructions are narrowly scoped to actions on the official creator site (login, open publish page, fill title/body, upload images if provided, require explicit publish confirmation). The skill does reference local image paths (it will need access to image files the user supplies) and may take snapshots for failure handling; these are reasonable for the purpose but the user should expect the agent to access any image paths provided and to capture screenshots of the page when troubleshooting.
Install Mechanism
Instruction-only skill with no install spec and no code files. This is low-risk from an install perspective because nothing is downloaded or written to disk by the skill package itself.
Credentials
No environment variables, credentials, or config paths are requested. That is appropriate for a skill that operates through the user's logged-in browser session rather than using third-party API keys or external services.
Persistence & Privilege
always:false (normal). The skill allows model invocation (disable-model-invocation:false), which is the platform default. The SKILL.md requires explicit, per-turn confirmation before publishing—this mitigates autonomous posting risk, but you should confirm that the agent/platform enforces that confirmation step in practice before granting the agent permission to act autonomously.
Assessment
This skill appears to do what it claims: automated interactions on creator.xiaohongshu.com. Before installing, verify two things: (1) the agent/platform will always pause and require the exact confirmation phrase before any 'publish' action (test with a dry-run or draft-only flow first), and (2) any local image paths you provide will be read/uploaded by the agent—do not point it at directories containing sensitive files. Because this is instruction-only, there is no bundled code to review, so only the runtime enforcement of the confirmation and your browser session controls stand between the agent and publishing. If you want extra caution, restrict the agent to draft-only mode or disable autonomous invocation until you are comfortable with its behavior.Like a lobster shell, security has layers — review code before you run it.
latestvk9766papb822dmtt8hmsjcd75h824stn
License
MIT-0
Free to use, modify, and redistribute. No attribution required.