← Back to Skills Marketplace
96
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install mux-social-media-automation
Description
自动管理小红书和微信视频号多账号内容发布，支持内容模板、合规审查和数据追踪生成日报。
Usage Guidance
This skill appears to implement the promised social-media automation features, but several red flags mean you should be cautious: (1) The listing metadata ownerId differs from the _meta.json ownerId — verify the publisher/registry identity before trusting code. (2) The skill requires sensitive secrets (platform access tokens, cookies, Feishu webhook) even though it declares none; do not run it with real credentials until you confirm where/how secrets are stored. (3) The doc suggests storing an encryption key and encrypted credentials in .credentials/ and the example uses a local Fernet key file — storing the encryption key alongside encrypted data or in the repository is insecure. Prefer a dedicated secret manager or OS-level protected storage. (4) Browser automation can capture login sessions (including MFA cookies); review code that loads cookies and make sure it does not exfiltrate them. (5) There are contradictory recommendations (gpg/pass vs Fernet) — ask the author for a single, secure secret-handling plan and for explicit env var names for any webhooks/API tokens. Recommended next steps: verify the package owner, get the full source code (not only SKILL.md) and an explanation of secret storage and Feishu endpoint usage, and run the code in an isolated environment with least-privilege test credentials. If you cannot validate the author or confirm safe secret handling, do not install or run this skill with production credentials.
Capability Analysis
Type: OpenClaw Skill
Name: mux-social-media-automation
Version: 1.0.0
The skill bundle provides a comprehensive framework for automating social media posts on Xiaohongshu and WeChat Video Channels. The SKILL.md and included code snippets (AccountManager, Publisher) focus on legitimate automation tasks such as credential management with encryption (cryptography.fernet), API integration, and browser automation via Playwright. There is no evidence of data exfiltration, prompt injection attacks, or malicious execution; the workflow is transparently aligned with its stated purpose of social media management.
Capability Assessment
Purpose & Capability
The SKILL.md content matches the stated purpose (Xiaohongshu and 微信视频号 automation, templates, tracking, reports). However registry/_meta metadata mismatch (ownerId differs between listing and _meta.json) and the package declares no required credentials while the instructions and example code clearly require API tokens, cookies, and webhooks. That mismatch is unexpected and reduces trust.
Instruction Scope
Runtime instructions instruct the agent to read/write local credential files (.credentials/), load cookies, launch browsers for automation, call platform APIs, and send daily reports to Feishu. Those actions are within the skill's functional scope but the instructions also reference unspecified external endpoints and secret material without clear limits, and they instruct storing and loading keys/cookies from disk — which broadens the data the agent will touch.
Install Mechanism
No install spec and no code files in the package delivered to the agent (instruction-only). That minimizes installer risk since nothing arbitrary is downloaded or written by an installer. The SKILL.md includes example code, but no automatic install steps are declared.
Credentials
The skill declares no required env vars/primary credential, yet examples and scheduler use ACCESS_TOKEN, cookies, and a Feishu webhook (send_to_feishu). The doc also instructs storing secrets in .credentials and gives conflicting encryption guidance (recommend gpg/pass but example code uses cryptography.Fernet with a local key file). Requiring/manage many secrets without declaring them and suggesting a local encryption key file (.credentials/key.key) is disproportionate and insecure if not handled carefully.
Persistence & Privilege
The example includes a scheduler that runs periodic publishing and reporting jobs, which implies long-running processes if deployed. The skill does not request always:true and does not modify other skills, so it does not ask for elevated platform privileges — but the agent/operator must be aware this will perform recurring actions and will access stored credentials over time.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install mux-social-media-automation - After installation, invoke the skill by name or use
/mux-social-media-automation - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release of social-media-automation skill:
- Automates end-to-end publishing and management workflows for Xiaohongshu and WeChat Channels.
- Supports multi-account configuration, posting via official APIs or browser automation, and compliance management.
- Includes content template library, content scheduling, auto-reporting with data tracking, and encrypted credential management.
- Provides troubleshooting guidance, performance metrics, and iterative workflow for ongoing optimization.
Metadata
Frequently Asked Questions
What is Social Media Automation?
自动管理小红书和微信视频号多账号内容发布，支持内容模板、合规审查和数据追踪生成日报。 It is an AI Agent Skill for Claude Code / OpenClaw, with 96 downloads so far.
How do I install Social Media Automation?
Run "/install mux-social-media-automation" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Social Media Automation free?
Yes, Social Media Automation is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Social Media Automation support?
Social Media Automation is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Social Media Automation?
It is built and maintained by Dally-bee (@dally-bee); the current version is v1.0.0.
More Skills