Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

小红书自动发布助手

Draft and publish posts to 小红书 (Xiaohongshu/RED). Use when creating content for 小红书, drafting posts, generating cover images, or publishing via browser automation. Covers the full workflow from content creation to browser-based publishing, including cover image generation with Pillow.

MIT-0 · Free to use, modify, and redistribute. No attribution required.
3 · 2.6k · 27 current installs · 30 all-time installs
MIT-0
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
Name/description match the actual behavior: drafting content, generating a cover image (Pillow script included), and automating a browser publish via the OpenClaw browser tool. No unrelated credentials, binaries, or hidden network endpoints are requested.
Instruction Scope
SKILL.md stays within publishing scope (draft → cover → review → publish). It instructs writing a draft file (memory/xiaohongshu-draft.md), generating/saving cover images to disk, sending posts to the user's messaging channel, and controlling a logged-in browser for publishing. These actions are expected for a publisher skill, but they mean the agent will act through the user's logged-in browser session (powerful capability) and will write files to disk (cover image, draft). The doc emphasizes 'Never auto-publish,' which mitigates risk if followed.
Install Mechanism
No install spec is provided (instruction-only skill). The included Python script uses Pillow and system fonts, which is proportional for cover generation. The script searches local font paths rather than downloading anything from the network; no external downloads or extraction steps are present.
Credentials
The skill requests no environment variables or credentials. It requires access to an OpenClaw browser node and the user's logged-in browser session — appropriate for performing browser-based publishing but a capability the user should limit to trusted nodes/profiles.
Persistence & Privilege
The skill does not set always:true, and model invocation is allowed (platform default). The SKILL.md documents cron integration for scheduled drafting/announcements; while the skill itself does not auto-publish, scheduled runs could produce drafts and send review messages automatically. Users should confirm scheduling and approval workflows to avoid unintended autonomous publishing.
Assessment
This skill is coherent for creating Xiaohongshu posts: it generates cover images locally (Pillow) and automates a browser that must be logged into the user's creator account. Before installing, ensure the OpenClaw node/browser profiles you give it access to are trusted (the agent will act using that logged-in session). Confirm your messaging channel and cron settings so drafts are reviewed before publishing—the skill emphasizes manual approval, but scheduled runs could still draft and announce content. You can inspect scripts/gen_cover.py locally (it only draws images and searches local font paths). If you do not want the agent to control a logged-in browser at all, do not grant it access to browser nodes or disable autonomous invocation/scheduling for this skill.

Like a lobster shell, security has layers — review code before you run it.

Current versionv1.0.0
Download zip
automationvk97e0trf1cnf8vcy2q7dr270v1810n9ylatestvk97e0trf1cnf8vcy2q7dr270v1810n9yredbookvk97e0trf1cnf8vcy2q7dr270v1810n9ysocial-mediavk97e0trf1cnf8vcy2q7dr270v1810n9yxiaohongshuvk97e0trf1cnf8vcy2q7dr270v1810n9y

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

SKILL.md

小红书 Publisher

Create, format, and publish posts to 小红书 (Xiaohongshu/RED) through browser automation.

Requirements

  • Python 3 with Pillow (pip install Pillow or apt install python3-pil)
  • CJK fontsfonts-noto-cjk on Linux (apt install fonts-noto-cjk), or Noto Sans CJK via Homebrew on macOS
  • OpenClaw browser tool — access to a browser with the user logged into 小红书 creator portal
  • A connected OpenClaw node (or sandbox browser) with Chrome/Chromium for browser automation

Overview

This skill handles the complete 小红书 publishing pipeline:

  1. Draft — Write post content in 小红书 style
  2. Cover — Generate a cover image (1080×1440)
  3. Review — Send draft to user for approval via messaging channel
  4. Publish — Use browser automation to post (or deliver for manual posting)

Workflow

Step 1: Draft Content

Create post content following 小红书 style. See references/content-guide.md for formatting rules, structure, and examples.

Key rules:

  • Title ≤20 chars, with emoji hook
  • Use --- section breaks, emoji bullets, short paragraphs
  • End with question CTA + hashtags (8-12 tags)
  • Save draft to memory/xiaohongshu-draft.md

Step 2: Generate Cover Image

Run the cover generation script:

python3 <skill-dir>/scripts/gen_cover.py --title "主标题" --subtitle "副标题" --tags "标签1,标签2,标签3" --output /path/to/cover.png

Options:

  • --title — Main title (large text, required)
  • --subtitle — Subtitle line (medium text, optional)
  • --tags — Comma-separated feature tags shown as pills (optional)
  • --badge — Top-right badge text (default: "OpenClaw")
  • --output — Output path (default: cover.png)
  • --gradient — Color scheme: purple (default), blue, green, orange, dark

Output: 1080×1440 PNG with gradient background, decorative elements, CJK text.

Step 3: Send for Review

Send the draft content + cover image to the user's messaging channel for review. Format:

📝 小红书草稿 — [主题]

标题:[标题]

[正文内容]

封面图已生成:[path]

请确认:
✅ 可以发布
✏️ 需要修改
❌ 不发

Never auto-publish. Always wait for explicit user approval.

Step 4: Publish via Browser

After user approval, publish using browser automation on the configured node.

See references/browser-publish.md for the complete browser automation steps.

Summary:

  1. Navigate to https://creator.xiaohongshu.com/publish/publish
  2. Enter title and body text
  3. Upload cover image via browser upload action
  4. Click publish

Fallback: Manual Publishing

If browser automation is unavailable (CDP issues, node offline, etc.), send the complete post to the user's channel with all content formatted for easy copy-paste:

📋 小红书发帖内容(请手动发布)

【标题】[标题]

【正文】
[正文内容]

【标签】[hashtags]

封面图:[path to cover image]

Known Limitations

  • Mac Chrome CDP: Chrome launched via SSH/node may fail to bind --remote-debugging-port on macOS (GUI session required). If browser start fails, fall back to manual publishing.
  • Login state: 小红书 creator portal requires login. If the session has expired, ask the user to re-login in their browser before proceeding.
  • Pillow emoji: Pillow cannot render color emoji (NotoColorEmoji.ttf) — use text/icon alternatives in cover images.

Cron Integration

This skill works with cron jobs for scheduled daily posting. Typical cron setup:

Schedule: 0 8 * * * (Asia/Shanghai)
Session: isolated agentTurn
Delivery: announce to user's channel

The cron job message should reference this skill and include the content plan/topic for the day.

Files

4 total
Select a file
Select a file to preview.

Comments

Loading comments…