Xiaohongshu Mcp Publisher

小红书完整自动化流程：从新闻搜索到封面生成到发布。触发场景：(1) 发布小红书笔记，(2) 搜索新闻生成内容，(3) 生成封面图，(4) 完整自动化运营。关键词：小红书发布、xhs publish、小红书自动化、新闻发布。

This skill appears to implement the advertised workflow (generate a cover image and post a note via a local MCP service), but there are a few things to check before installing or running it: 1) Verify the upstream source (the linked GitHub repo) to ensure the MCP binaries and login tool are trustworthy. 2) The package includes Python scripts but does not declare dependencies — you will need Pillow and requests; run them in a controlled virtualenv. 3) The publish script expects a local service at http://localhost:18060 and prints hardcoded macOS example paths — confirm the MCP service is actually installed and running on your machine (and update any paths to match your environment). 4) Because the skill talks to a local HTTP service and writes image files, run it in a sandbox or non-privileged account until you confirm behavior. 5) If you do not control or trust the MCP service binary referenced, do not run the publish step; validate that the service does not forward data externally. Resolving the missing dependency declarations and removing/parameterizing hardcoded paths would reduce the concerns noted here.

Type: OpenClaw Skill Name: xiaohongshu-mcp-publisher Version: 1.1.0 The skill bundle provides a legitimate automation workflow for generating and publishing Xiaohongshu (XHS) posts via a local MCP service. The Python scripts (gen_cover.py and publish.py) perform image processing using PIL and standard HTTP requests to a local endpoint (localhost:18060) as described in the documentation. No evidence of data exfiltration, unauthorized remote execution, or malicious prompt injection was found; the hardcoded file paths in error messages appear to be developer placeholders.