Xiaohongshu Post

在小红书创作服务平台发布图文帖子。包括： (1) 从本地桌面跨权限上传图片到小红书， (2) 填写标题和正文， (3) 发布帖子。当用户要求发布小红书帖子、上传图片到小红书、或需要在小红书发图文时使用此skill。

This skill asks the agent to search your Desktop, copy images into a temporary folder, and use your Chrome profile session to upload them. That behavior is plausible for posting images but is privacy-sensitive and isn’t declared in the skill metadata. Before installing or using it, confirm you trust the skill author and that the agent runtime will prompt you before running PowerShell or accessing files. Prefer a version that: (1) asks you to select specific files rather than scanning the whole Desktop, (2) declares required local paths/permissions, or (3) uses an explicit file-pick UI so you can control exactly which files are exposed. If you cannot verify those controls, avoid installing or only run it in a tightly sandboxed environment where it cannot access your real home directory or browser profiles.

Type: OpenClaw Skill Name: xiaohongshu-post Version: 1.1.0 The skill instructions in SKILL.md direct the agent to use PowerShell to scan the user's entire desktop ($env:USERPROFILE\Desktop) and copy files to a temporary directory (\tmp\openclaw\uploads) to bypass browser upload limitations. While this is framed as a functional requirement for posting to Xiaohongshu, the broad file system access and use of shell commands to move local data represent an over-privileged design and a significant security risk if the agent is manipulated.