← Back to Skills Marketplace
422
Downloads
1
Stars
1
Active Installs
1
Versions
Install in OpenClaw
/install phil-auto-redbook-skills
Description
小红书笔记素材创作技能。当用户需要创建小红书笔记素材时使用这个技能。技能包含:根据用户的需求和提供的资料,撰写小红书笔记内容(标题+正文),生成图片卡片(封面+正文卡片),以及发布小红书笔记。
Usage Guidance
This package largely does what it claims (render Markdown to images and optionally publish to 小红书). Before installing or running it: 1) Inspect scripts/publish_xhs.py and any network calls — verify it posts only to xiaohongshu APIs and doesn't send your cookie elsewhere. 2) Treat XHS_COOKIE as highly sensitive: don't paste it into public repos; use a throwaway/test account if possible. 3) Note the package will require installing Python/Node deps and Playwright (which downloads Chromium) — run in an isolated environment or container if you are concerned. 4) Ask the publisher to fix the skill metadata to declare XHS_COOKIE as a required env var and to document endpoints used; absence of that declaration is the main incoherence. If you can't review the publish script yourself, avoid using the publish feature and use render-only (generate images locally) instead.
Capability Analysis
Type: OpenClaw Skill
Name: phil-auto-redbook-skills
Version: 2.0.0
The skill bundle is a legitimate toolset for automating the creation and publication of Xiaohongshu (Redbook) notes. It utilizes Playwright for high-quality image rendering from Markdown templates and the 'xhs' library for note distribution. While the 'publish_xhs.py' script handles sensitive session cookies (XHS_COOKIE) and includes an optional API mode for signature handling, these features are standard for this type of automation and are clearly documented. The code is well-structured, lacks obfuscation, and shows no signs of data exfiltration, unauthorized remote access, or malicious prompt injection.
Capability Assessment
Purpose & Capability
Name, description, and included scripts (render_xhs.*, publish_xhs.py) align with the stated purpose (generate card images and optionally publish to 小红书). However the registry metadata lists no required env vars while the SKILL.md and env.example explicitly require an XHS_COOKIE for publishing — a metadata omission that is disproportionate to the stated manifest.
Instruction Scope
SKILL.md stays on-topic: it instructs how to write Markdown, run local render scripts (Python/Node) and optionally publish using a cookie. It explicitly tells users to extract a browser Cookie via devtools — that is sensitive but directly related to the publish feature. The instructions do not ask for unrelated system-wide data, but the publish step will use a session credential (cookie) which must be handled carefully.
Install Mechanism
This skill is instruction-first with bundled scripts; there is no platform install spec. The repository contains package.json and requirements.txt and references Playwright and an xhs client — installing these pulls in browser automation binaries (Playwright will download Chromium). That is expected for rendering but increases attack surface; no arbitrary external download URLs were found in the provided files.
Credentials
The only runtime secret required for publishing is an XHS_COOKIE (documented in SKILL.md and env.example). However the registry metadata incorrectly declares 'no required env vars' and 'primary credential: none', so the skill's manifest understates the credential requirement. Requesting a site cookie is proportional to the publish feature, but cookies are highly sensitive — the missing metadata and lack of constrained guidance (e.g., support for API tokens or oauth instead) is a red flag.
Persistence & Privilege
Skill does not request always:true and is user-invocable only. It does not declare or require modifying other skills or system-wide configuration. Autonomous invocation is enabled (disable-model-invocation:false) which is platform default; this combined with the cookie requirement increases blast radius but on its own is expected for skills that can publish.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install phil-auto-redbook-skills - After installation, invoke the skill by name or use
/phil-auto-redbook-skills - Provide required inputs per the skill's parameter spec and get structured output
Version History
v2.0.0
Major refactor: 8 themes, 4 pagination modes, unified templates, updated Node/Python renderers, docs refresh
Metadata
Frequently Asked Questions
What is Auto Redbook Skills?
小红书笔记素材创作技能。当用户需要创建小红书笔记素材时使用这个技能。技能包含:根据用户的需求和提供的资料,撰写小红书笔记内容(标题+正文),生成图片卡片(封面+正文卡片),以及发布小红书笔记。 It is an AI Agent Skill for Claude Code / OpenClaw, with 422 downloads so far.
How do I install Auto Redbook Skills?
Run "/install phil-auto-redbook-skills" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Auto Redbook Skills free?
Yes, Auto Redbook Skills is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Auto Redbook Skills support?
Auto Redbook Skills is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Auto Redbook Skills?
It is built and maintained by phil-guo (@phil-guo); the current version is v2.0.0.
More Skills