← 返回 Skills 市场

AI智能写作助手Pro

Name: AI智能写作助手Pro
Author: ryan-wuxl

作者 ryan-wuxl · GitHub ↗ · v1.0.0 · MIT-0

cross-platform ⚠ suspicious

115

总下载

当前安装

版本数

在 OpenClaw 中安装

/install ai-writer-pro

功能描述

AI 智能写作助手 - 支持多平台内容创作，包括公众号、小红书、知乎、LinkedIn 等风格。提供 AI 查重、SEO 优化、改写润色等功能，一键生成高质量内容。

使用说明 (SKILL.md)

AI 智能写作助手

一站式 AI 内容创作工具，支持多平台风格，助你轻松产出爆款内容。

✨ 功能特点

📝 多平台风格 - 支持公众号、小红书、知乎、LinkedIn、Twitter 等
🎨 10+ 写作风格 - 专业、轻松、幽默、故事化等
🔍 AI 查重检测 - 检测内容原创度，避免重复
📈 SEO 优化 - 自动插入关键词，提升搜索排名
🔄 智能改写 - 一键改写、润色、扩写、缩写
⚡ 一键生成 - 输入主题，快速生成完整文章

🚀 使用方法

生成文章

# 公众号风格
node {baseDir}/scripts/write.mjs --topic "AI 投资趋势" --style wechat --tone professional

# 小红书风格
node {baseDir}/scripts/write.mjs --topic "理财小白入门" --style xiaohongshu --tone casual

# 知乎风格
node {baseDir}/scripts/write.mjs --topic "如何选股" --style zhihu --tone story

改写润色

node {baseDir}/scripts/rewrite.mjs --file ./article.md --style professional

SEO 优化

node {baseDir}/scripts/seo.mjs --file ./article.md --keywords "AI,投资,股票"

🎨 支持的平台风格

平台	风格特点
wechat	公众号 - 深度长文，逻辑清晰
xiaohongshu	小红书 - 短平快，emoji 多
zhihu	知乎 - 专业严谨，数据支撑
linkedin	LinkedIn - 职场专业，简洁有力
twitter	Twitter/X - 简短精悍，观点鲜明
weibo	微博 - 热点结合，互动性强
douyin	抖音 - 口语化，节奏快

📝 语气风格

professional - 专业严谨
casual - 轻松随意
humorous - 幽默风趣
story - 故事化叙述
persuasive - 说服力强
emotional - 情感共鸣

🔧 配置

需要设置 Tavily API Key（用于热点话题搜索）：

export TAVILY_API_KEY=your_api_key_here

📄 输出示例

# AI 投资新趋势：普通人如何抓住机会 🤖💰

> 本文 1500 字，阅读约 5 分钟

最近，AI 投资成为了热门话题...

## 为什么现在是入场时机？

...

---

*本文由 AI 智能写作助手生成*

License

MIT

安全使用建议

This skill largely behaves like a writing assistant, but it executes a local script at ~/.openclaw/skills/tavily-search/scripts/search.mjs with your environment available. Before installing or using it: 1) Verify the tavily-search script exists and is from a trusted source (inspect its contents). 2) Don't set sensitive env vars (or run in an environment with other secrets) until you confirm the invoked script is safe. 3) Ask the author why rewrite.mjs and seo.mjs are referenced but missing. 4) If you must run it, prefer an isolated/sandboxed environment (or container) and limit environment variables. If you cannot validate the invoked tavily-search code, treat the skill as potentially unsafe.

功能分析

Type: OpenClaw Skill Name: ai-writer-pro Version: 1.0.0 The script 'scripts/write.mjs' contains a critical shell injection vulnerability in the 'searchHotTopics' function. The user-provided '--topic' argument is directly interpolated into a shell command string executed via 'execSync' without any sanitization, allowing for arbitrary command execution. While the bundle appears to be a functional writing assistant, this high-risk vulnerability warrants a suspicious classification.

能力评估

ℹ Purpose & Capability

Name/description match a multi-platform writing assistant and the skill requests a Tavily API key (used for 'hot topic' search), which is coherent. However SKILL.md and README reference additional scripts (scripts/rewrite.mjs, scripts/seo.mjs) that are not present in the package—an incomplete implementation or mismatch between documentation and shipped files.

⚠ Instruction Scope

The runtime script (scripts/write.mjs) uses child_process.execSync to invoke a script at ~/.openclaw/skills/tavily-search/scripts/search.mjs. That executes arbitrary code from the user's skill directory and is not declared as a dependency. The script also passes the process environment to the child, exposing other environment variables and the TAVILY_API_KEY to the executed script. This execution surface is broader than a simple content generator and could be abused if the invoked script is untrusted or replaced.

✓ Install Mechanism

No install spec or network downloads are present; the package is shipped with local JS files only. There is no evidence of remote archives or unusual installation steps.

⚠ Credentials

The skill only declares one required env var (TAVILY_API_KEY), which is reasonable for a 'hot topic' search feature. However, because the script spawns a child process and spreads process.env into the child's environment, any other environment secrets present on the host could be made available to the invoked script. The skill does not justify making arbitrary local skill code able to access the full environment.

✓ Persistence & Privilege

The skill does not request 'always: true' or otherwise demand permanent/resident privileges and does not modify system-wide or other-skills' configuration. It only reads process.env and the HOME path to find another skill.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install ai-writer-pro
安装完成后，直接呼叫该 Skill 的名称或使用 /ai-writer-pro 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v1.0.0

初始版本：支持7大平台风格（公众号/小红书/知乎/LinkedIn/Twitter/微博/抖音），6种语气风格，集成Tavily热点搜索

元数据

Slug ai-writer-pro

版本 1.0.0

许可证 MIT-0

累计安装 0

当前安装数 0

历史版本数 1

常见问题