头号红娘新媒体

头号红娘公众号内容创作工作流。用于生产婚恋行业爆款文章，包含热点抓取、标题生成、文章撰写、平台软植入四大环节。 触发场景： - 用户要求创作婚恋相关内容 - 用户提到"头号红娘"、"婚恋文章"、"相亲内容" - 用户要求生成公众号文章且涉及婚恋/情感/相亲话题

This skill appears to do what it promises (generate marriage/相亲公众号 content and insert '头号红娘' promotion), but there are a few red flags to check before installing: - The runtime instructions expect a local search proxy at http://localhost:$PORT and read $env:AUTH_GATEWAY_PORT (default 19000). Confirm whether your agent environment actually runs an online-search gateway on localhost and whether you trust that service. If you don't run such a service, the skill's search step will fail or could attempt to reach an unexpected local endpoint. - The SKILL.md runs python and uses a PowerShell snippet. The manifest declares no required binaries. Ask the author to explicitly list required binaries (python, PowerShell or a cross-platform alternative) and any other runtime dependencies. - The skill automatically inserts promotional copy for the brand '头号红娘' into every article. If you are not affiliated with that brand, this is unexpected behavior — confirm intent and whether you want automatic branding/marketing included. - Because the skill invokes a local proxy, verify that the proxy does not expose sensitive local data. If you need stronger assurance, request the author to: (a) declare required env vars and binaries in the manifest, (b) explain the online-search skill/proxy behavior (what external sites it queries), and (c) provide an option to disable automatic posting/branding or require user approval before insertion. If the author updates the manifest to declare AUTH_GATEWAY_PORT and the required binaries, and documents the local proxy/online-search behavior (or provides non-local fallback), the inconsistencies would be resolved and the assessment could move to benign.

Type: OpenClaw Skill Name: touhao-hongniang-media Version: 1.0.0 The skill bundle provides a workflow for generating marketing content for a matchmaking service but includes instructions for the agent to execute raw PowerShell code in SKILL.md. This script performs local network requests via Invoke-RestMethod to an internal proxy (localhost:19000) and uses shell execution (python -c) to generate timestamps. While these capabilities are plausibly needed for the 'hotspot capture' task, the use of direct script execution to interact with local services and the shell environment is classified as a risky capability.