小红书长图文发布

自动化在小红书网页版发布长图文笔记，支持标题正文填写、一键排版及快速发布，单次耗时约2-3分钟。

This skill appears to do what it says (automate publishing on 小红书) and has no code/install footprint, but it expects the OpenClaw browser to be configured for host control and asks you to inspect ~/.openclaw/openclaw.json — a file the skill's manifest did not declare. Before installing or running: 1) review ~/.openclaw/openclaw.json yourself to confirm it contains only settings you expect (and back it up), 2) understand that enabling allowHostControl gives the tooling broad automation power over that browser profile (avoid using a profile with sensitive logged-in sessions), 3) consider testing with a throwaway Xiaohongshu account and an isolated browser profile, and 4) be cautious with snapshots or saved snapshots since they may capture page contents (potentially secrets). If you need stronger assurance, ask the skill author to declare the config path in its manifest or to provide a minimal checklist that does not require reading other local configs.

Type: OpenClaw Skill Name: rednote-publisher Version: 1.0.0 The skill is classified as suspicious because it explicitly requires the `browser.allowHostControl: true` setting in the OpenClaw agent's sandbox configuration (`SKILL.md`). While the skill's direct commands (`browser act click`, `browser act type`) are limited to benign browser DOM manipulation and do not appear to leverage this broad permission, requiring `allowHostControl: true` for such actions is an over-permissioned prerequisite. This significantly increases the attack surface of the OpenClaw environment, presenting a risky capability without clear justification for the skill's stated purpose of publishing long-form notes.