知乎发帖 (Zhihu Post via Browser Relay)

在知乎发布内容（专栏文章、想法/动态）。使用 Chrome Browser Relay 控制用户的 Chrome 浏览器完成发布。触发词：知乎发帖、发知乎、知乎文章、知乎想法、zhihu post、发布到知乎、帮我发知乎。

This skill appears to do exactly what it says: automate posting to Zhihu by controlling an already-attached Chrome tab and pre-processing Markdown locally. Key things to consider before installing: 1) Browser Relay grants the skill the ability to act as you in any attached, logged-in tab — only attach tabs you trust and detach when not using the skill. 2) The included Python script runs locally and only does Markdown→HTML and length checks; review it if you want to be sure. 3) There are no external installs or secret requests, which is good; nevertheless, only install skills from publishers you trust because they can automate actions in your browser once a tab is attached. 4) If you are concerned about autonomous invocation, avoid leaving Browser Relay-attached tabs open or limit the agent's ability to invoke skills autonomously via your platform controls.

Type: OpenClaw Skill Name: zhihu-post Version: 1.0.0 The skill utilizes OpenClaw's powerful `browser` action for extensive control over the user's Chrome browser, including arbitrary JavaScript execution within the browser context and file uploads from a designated temporary directory (`/tmp/openclaw/uploads/`). While the provided instructions in `SKILL.md` and the `scripts/zhihu_prepare.py` file do not show clear evidence of intentional malicious behavior (e.g., data exfiltration to external endpoints, backdoors), the inherent capabilities for browser manipulation and file system interaction are high-risk. These capabilities, even when used for the stated purpose of Zhihu posting, could be exploited if the agent's input is compromised or if the skill were modified, thus classifying it as suspicious due to risky capabilities without explicit malicious intent.