搜索当天真实热门话题，选择一个深度创作，生成简约图片，自动发布。

This skill appears to implement search→compose→image→publish, but check these before installing: 1) The code expects an external 'mcporter' CLI and Xiaohongshu MCP credentials even though none are declared—ensure you have and trust mcporter and that credential handling is acceptable. 2) Pillow (PIL) is required but not installed automatically—install it in a controlled environment. 3) The script disables TLS verification for network fetches (insecure) — consider removing that or validating endpoints. 4) The publish uses subprocess.run(shell=True) with user-generated content—review/escape inputs or avoid shell=True to reduce injection risk. 5) The skill writes files under /home/admin and /tmp—if you run it on a multi-user or production system run it in an isolated sandbox. If you plan to use auto-publish, verify how mcporter obtains credentials and test in a safe environment first.

Type: OpenClaw Skill Name: local-life-hotspot Version: 6.0.0 The skill contains a critical shell injection vulnerability in run.py within the publish_to_xiaohongshu function, where content fetched from the web is passed into a shell command via subprocess.run(shell=True). Additionally, the script explicitly disables SSL certificate verification (ssl.CERT_NONE) for its connections to Jina AI (s.jina.ai). While these are severe security flaws that could allow for Remote Code Execution (RCE) or Man-in-the-Middle (MITM) attacks, they appear to be unintentional vulnerabilities rather than intentional malice.