AI全链路科技资讯工厂
SuspiciousAudited by ClawScan on May 10, 2026.
Overview
This instruction-only workflow is coherent for a news publishing factory, but it can automatically publish to public social platforms using account sessions without a clear review gate or declared credential boundary.
Install only if you trust and have reviewed the dependent local publishing skills. Before use, configure it to save drafts first, manually approve every Xiaohongshu/WeChat post, and avoid enabling the cron schedule until you are comfortable with recurring automated publication.
Findings (4)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The agent could post AI-generated content to the user's public social or official accounts, affecting reputation or compliance if the content is inaccurate or unwanted.
The workflow directs the agent to publish multiple public posts/articles, but the artifacts do not define a mandatory draft, preview, or user approval step before publication.
用 xiaohongshutools 发布小红书笔记（3条：热点、应用、深度各1条） ... 发布到公众号
Add an explicit review-and-confirmation gate before every publish action, default to saving drafts, and require separate user approval for Xiaohongshu and WeChat publication.
If configured, the agent may act through the user's logged-in social accounts, including publishing content under that identity.
The skill expects access to platform session cookies and official-account authorization, while the supplied metadata declares no primary credential or required environment variables.
确保已配置 cookies 和 session（参考 SKILL.md） ... 确认公众号授权状态
Declare required credentials clearly, document where sessions are stored, limit them to posting-only scopes where possible, and warn users before using account sessions.
The safety of the overall workflow depends on other installed skills that may have broader account or file access than this package discloses.
The workflow depends on local, unreviewed skills for high-impact functions such as social posting; their code and provenance are not included in the artifact set.
"source": "local", "path": "/root/.openclaw/workspace/skills/xiaohongshutools"
Review and pin the dependent skills, especially publishing tools, before enabling the workflow or scheduling it.
If the user installs the cron job, the agent may continue generating and publishing content on a schedule without the user being present.
The cron command is a disclosed, user-directed setup example, but it would persistently trigger the full publishing workflow every day.
配合 OpenClaw cron 实现每日自动执行 ... cron add --name "AI科技资讯工厂"
Use cron only after adding publish confirmations, draft mode, monitoring, and an easy disable path.