โ† Back to Skills Marketplace
guanlansss

xiaohongshu-full-auto

by guanlansss ยท GitHub โ†— ยท v1.0.0 ยท MIT-0
cross-platform โš  suspicious
89
Downloads
2
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install xiaohongshu-full-auto
Description
๐Ÿš€ ๅฐ็บขไนฆๅ…จ้“พ่ทฏ่‡ชๅŠจๅŒ–่‡ชๅช’ไฝ“ๅทฅไฝœๆต๏ผŒไปŽ็ƒญ็‚นๆŠ“ๅ– โ†’ ้€‰้ข˜ๅˆ†ๆž โ†’ ๆ–‡ๆกˆ็”Ÿๆˆ โ†’ ๅฐ้ขๅ›พ็”Ÿๆˆ โ†’ ่‡ชๅŠจๅ‘ๅธƒ๏ผŒไธ€ๆก้พ™ๅ…จ่‡ชๅŠจๆžๅฎšๅฐ็บขไนฆๅ†…ๅฎนๅˆ›ไฝœใ€‚้€‚ๅˆ่‡ชๅช’ไฝ“ๅšไธปใ€ๅ‰ฏไธš็Žฉๅฎถใ€ๅ†…ๅฎนๅทฅไฝœๅฎคๆ‰น้‡็”Ÿไบงๅฐ็บขไนฆๅ†…ๅฎนใ€‚่งฆๅ‘ๅ…ณ้”ฎ่ฏ๏ผš"ๅ…จ่‡ชๅŠจๅฐ็บขไนฆ", "ๅฐ็บขไนฆๅˆ›ไฝœ", "ๅฐ็บขไนฆ่‡ชๅŠจๅ‘ๅธƒ", "ๅฐ็บขไนฆ็ƒญๆฆœ", "ๆ‰น้‡ๅšๅฐ็บขไนฆ", "xia...
Usage Guidance
This package is inconsistent and needs closer review before use. Specific things to check: 1) The bundle is missing key modules (generate_content.py, generate_cover.py, publish.py) referenced by full_auto.py โ€” obtain or inspect those files before running. 2) SKILL.md and config-example require sensitive credentials (XIAOHONGSHU_COOKIE, XIAOHONGSHU_BUSINESS_ID, optional OPENAI_API_KEY, Feishu tokens) but the registry metadata lists none โ€” do not supply real cookies/keys to this code until you verify the publish implementation. 3) get_hot_topics calls a thirdโ€‘party endpoint (api.fakey.top) rather than an official API; confirm what data is sent and whether that endpoint is trustworthy. 4) Because the package may attempt network calls and publishing, test in an isolated/sandbox environment and run in semi-auto/assist-only mode first. 5) Ask the publisher for the missing files or a provenance explanation (why credentials aren't declared, where publish.py comes from) and review publish.py to confirm it posts only to legitimate Xiaohongshu endpoints. If you cannot obtain or verify the missing modules and code provenance, avoid using with real account credentials.
Capability Analysis
Type: OpenClaw Skill Name: xiaohongshu-full-auto Version: 1.0.0 The skill bundle provides a legitimate automation workflow for Xiaohongshu content creation, including trend scraping, AI content generation, and automated publishing. The code is well-structured, uses safe practices like `yaml.safe_load`, and contains no evidence of malicious intent, data exfiltration, or unauthorized execution. While it requires sensitive credentials (XIAOHONGSHU_COOKIE) and utilizes a third-party API (api.fakey.top) for scraping, these are standard requirements for the stated functionality and are handled within the user's local environment. No prompt injection or obfuscation was found in the documentation or scripts (full_auto.py, get_hot_topics.py).
Capability Assessment
โš  Purpose & Capability
The skill's name/description promise full-chain posting to Xiaohongshu, which would legitimately require Xiaohongshu credentials and a publishing implementation โ€” the SKILL.md and config-example list XIAOHONGSHU_COOKIE and BUSINESS_ID and mention Feishu tokens, but the registry metadata declares no required env/primary credential. More critically, the main script (full_auto.py) imports generate_content.py, generate_cover.py and publish.py which are NOT present in the bundle. That makes the package incoherent: it claims to perform publishing but does not include the publishing/generation modules or declare where they come from.
โš  Instruction Scope
SKILL.md instructs the agent to fetch hot topics, generate content and covers, and call Xiaohongshu/Feishu APIs to publish and record results. Those instructions include reading a config file, writing local logs, and performing network calls. That scope is expected for a publisher skill, but the instructions require secrets (cookies/business_id, optional OpenAI key) that are not declared in the registry metadata. The instructions also reference files/scripts (generate_content.py, publish.py, generate_cover.py) missing from the package, creating a gap between what the agent is told to do and what it actually can do.
โ„น Install Mechanism
No install spec (instruction-only style) โ€” lower risk from installations. SKILL.md requests pip install requests, beautifulsoup4, markdownify which are reasonable for scraping/text processing. However the get_hot_topics implementation calls an external thirdโ€‘party endpoint (https://api.fakey.top/xiaohongshu/hot) instead of an official Xiaohongshu API which is unexpected and introduces a network dependency to an untrusted domain.
โš  Credentials
The package metadata lists no required env vars, but SKILL.md and config-example explicitly require XIAOHONGSHU_COOKIE and XIAOHONGSHU_BUSINESS_ID and optionally OPENAI_API_KEY and Feishu tokens. This mismatch is a red flag: the runtime needs sensitive credentials to publish on behalf of a user, yet those were not declared. The skill would therefore request secrets at runtime without the package metadata signalling that.
โœ“ Persistence & Privilege
The skill is not marked always:true and uses normal user-invocable/autonomous defaults. It writes a local published.jsonl log but does not request persistent system-wide privileges or attempt to modify other skills' configs. No other elevated persistence or privileged behaviour is present in the bundle.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install xiaohongshu-full-auto
  3. After installation, invoke the skill by name or use /xiaohongshu-full-auto
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
xiaohongshu-full-auto v1.0.0 - ๅˆๅง‹็‰ˆๆœฌๅ‘ๅธƒ๏ผŒๆไพ›ๅฐ็บขไนฆๅ…จ้“พ่ทฏๅ†…ๅฎนๅˆ›ไฝœ่‡ชๅŠจๅŒ–๏ผŒไปŽ้€‰้ข˜ๅˆฐๅ‘ๅธƒๅ…จๆต็จ‹ไธ€็ซ™ๅผๅฎŒๆˆ - ๆ”ฏๆŒ่‡ชๅŠจๆŠ“ๅ–ๅฐ็บขไนฆ็ƒญๆฆœใ€ๆ™บ่ƒฝๅŒน้…ๅž‚็ฑป้€‰้ข˜ใ€็”Ÿๆˆๅฐ็บขไนฆ้ฃŽๆ ผๆ–‡ๆกˆๅŠ AI ๅฐ้ขๅ›พ - ้›†ๆˆๅŽŸ็”ŸAPI่‡ชๅŠจๅ‘ๅธƒๅŠŸ่ƒฝ๏ผŒๅ‘ๅธƒ็ป“ๆžœ่‡ชๅŠจ่ฎฐๅฝ•ๆ—ฅๅฟ— - ๆไพ›ๅ…จ่‡ชๅŠจใ€ๅŠ่‡ชๅŠจใ€ไป…่พ…ๅŠฉไธ‰็งๅ†…ๅฎนๅˆ›ไฝœๆจกๅผ - ่ฏฆ็ป†ๆ”ฏๆŒ็Žฏๅขƒ้…็ฝฎใ€ไพ่ต–ๅฎ‰่ฃ…ๅŠๅˆ†ๆญฅ/ๅ…จๆต็จ‹ไฝฟ็”จ - ๅ†…็ฝฎๅฐ็บขไนฆๅ†™ไฝœ่ง„่ŒƒไธŽไผไธš็บงๅฏ้ ๆ€ง่ฎพ่ฎก
Metadata
Slug xiaohongshu-full-auto
Version 1.0.0
License MIT-0
All-time Installs 0
Active Installs 0
Total Versions 1
Frequently Asked Questions

What is xiaohongshu-full-auto?

๐Ÿš€ ๅฐ็บขไนฆๅ…จ้“พ่ทฏ่‡ชๅŠจๅŒ–่‡ชๅช’ไฝ“ๅทฅไฝœๆต๏ผŒไปŽ็ƒญ็‚นๆŠ“ๅ– โ†’ ้€‰้ข˜ๅˆ†ๆž โ†’ ๆ–‡ๆกˆ็”Ÿๆˆ โ†’ ๅฐ้ขๅ›พ็”Ÿๆˆ โ†’ ่‡ชๅŠจๅ‘ๅธƒ๏ผŒไธ€ๆก้พ™ๅ…จ่‡ชๅŠจๆžๅฎšๅฐ็บขไนฆๅ†…ๅฎนๅˆ›ไฝœใ€‚้€‚ๅˆ่‡ชๅช’ไฝ“ๅšไธปใ€ๅ‰ฏไธš็Žฉๅฎถใ€ๅ†…ๅฎนๅทฅไฝœๅฎคๆ‰น้‡็”Ÿไบงๅฐ็บขไนฆๅ†…ๅฎนใ€‚่งฆๅ‘ๅ…ณ้”ฎ่ฏ๏ผš"ๅ…จ่‡ชๅŠจๅฐ็บขไนฆ", "ๅฐ็บขไนฆๅˆ›ไฝœ", "ๅฐ็บขไนฆ่‡ชๅŠจๅ‘ๅธƒ", "ๅฐ็บขไนฆ็ƒญๆฆœ", "ๆ‰น้‡ๅšๅฐ็บขไนฆ", "xia... It is an AI Agent Skill for Claude Code / OpenClaw, with 89 downloads so far.

How do I install xiaohongshu-full-auto?

Run "/install xiaohongshu-full-auto" in the OpenClaw or Claude Code chat to install it in one step โ€” no extra setup required.

Is xiaohongshu-full-auto free?

Yes, xiaohongshu-full-auto is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does xiaohongshu-full-auto support?

xiaohongshu-full-auto is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created xiaohongshu-full-auto?

It is built and maintained by guanlansss (@guanlansss); the current version is v1.0.0.

๐Ÿ’ฌ Comments