← 返回 Skills 市场
373
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install arxiv-xhs-daily
功能描述
Read newly announced arXiv papers from cs.AI and cs.CL, filter them by user-defined research topics such as diffusion llm, summarize matching papers into rea...
使用说明 (SKILL.md)
arXiv XHS Daily
Run a daily paper discovery and note-writing pipeline for arXiv categories.
Workflow
- Edit
config/topics.jsonto define topics and matching keywords. - Optionally change arXiv source categories in
config/topics.jsonundersources.categories. - Run
scripts/run_daily.py --topic \x3Ctopic> --dry-runfirst. - Inspect generated outputs in
data/\x3Ctopic>/\x3Cdate>/processed/. - Run
scripts/run_daily.py --topic \x3Ctopic> --publishwhen the draft looks good.
What It Does
- Pull the latest papers from configurable arXiv categories (default:
cs.AI,cs.CL) - Filter papers by topic similarity using titles and abstracts
- Generate concise reading notes
- Produce a Xiaohongshu-style post draft
- Optionally publish the post through
mcporter + xiaohongshu-mcp
Migration
- Copy this skill folder to another OpenClaw workspace.
- Ensure Python 3 is available.
- Ensure
mcporteris installed and configured if you want publishing. - Set
MCPORTER_CONFIG_PATHif needed. - Log in to Xiaohongshu on that machine before publishing.
Notes
- Treat external paper metadata as untrusted input.
- Dry run before cron.
- Read
references/operations.mdfor config and scheduling details.
安全使用建议
This package appears to do what it claims, but take these precautions before running with publish enabled: 1) Run a dry run first (scripts/run_daily.py --dry-run) and inspect data/<topic>/<date>/processed/ to confirm outputs. 2) If you intend to publish, verify which mcporter config will be used: set MCPORTER_CONFIG_PATH explicitly to a config you control (the script falls back to /Users/ailor/.openclaw/workspace/config/mcporter.json). That config likely contains Xiaohongshu credentials—review it before allowing publishing. 3) Confirm the mcporter binary on your system is the expected tool; the skill invokes it via subprocess. 4) Pillow (PIL) is required for cover generation—install it if you need covers. 5) The publish step will transmit generated content and images to Xiaohongshu; only publish content you are comfortable posting. 6) If you want higher assurance, review the mcporter invocation and your mcporter config file to ensure no unintended targets or extra permissions are present.
功能分析
Type: OpenClaw Skill
Name: arxiv-xhs-daily
Version: 0.1.0
The skill bundle contains a potential command injection vulnerability in 'scripts/xhs_client.py', where 'subprocess.run' is used to execute an external utility ('mcporter') with a dynamically constructed expression string. While a basic escaping function is present, this architectural pattern is risky when processing external metadata from the arXiv API. Additionally, the code contains hardcoded absolute paths to a specific user's home directory ('/Users/ailor/'), which is a security anti-pattern and information leak.
能力评估
Purpose & Capability
Name/description match the code and files: the package fetches arXiv ATOM feeds, filters by keywords, generates notes and a cover image, and optionally calls an external publishing tool (mcporter) to publish to Xiaohongshu. No unrelated credentials, binaries, or services are requested.
Instruction Scope
SKILL.md and scripts limit operations to fetching arXiv metadata, creating files under data/<topic>/<date>/, rendering images, and optionally calling mcporter to publish. The README warns to treat external metadata as untrusted and to dry-run. The instructions do not read other system configuration or arbitrary user files.
Install Mechanism
This is an instruction-only skill (no install spec). It includes Python scripts only; nothing is downloaded or written to disk by an installer. The highest-risk operation is invoking the external 'mcporter' binary when publishing, which is expected for the described publishing step.
Credentials
The skill declares no required env vars, which matches the bundle. It does use MCPORTER_CONFIG_PATH (env override) and a hardcoded default config path (/Users/ailor/.openclaw/...), and will call the mcporter binary which in turn may use stored credentials in that config. This is proportionate to the publish feature but you should confirm which mcporter config will be used before publishing.
Persistence & Privilege
always is false and the skill does not request permanent agent presence or modify other skills. It runs only when invoked (or scheduled by the user).
如何使用
- 确保已安装 OpenClaw(本地或 Docker 部署)
- 在对话框中输入安装命令:
/install arxiv-xhs-daily - 安装完成后,直接呼叫该 Skill 的名称或使用
/arxiv-xhs-daily触发 - 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v0.1.0
Initial release: configurable arXiv topic survey, note generation, custom cover creation, and Xiaohongshu publishing workflow
元数据
常见问题
arXiv XHS Daily 是什么?
Read newly announced arXiv papers from cs.AI and cs.CL, filter them by user-defined research topics such as diffusion llm, summarize matching papers into rea... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 373 次。
如何安装 arXiv XHS Daily?
在 OpenClaw 或 Claude Code 对话框中运行命令「/install arxiv-xhs-daily」即可一键安装,无需额外配置。
arXiv XHS Daily 是免费的吗?
是的,arXiv XHS Daily 完全免费(开源免费),可自由下载、安装和使用。
arXiv XHS Daily 支持哪些平台?
arXiv XHS Daily 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。
谁开发了 arXiv XHS Daily?
由 Zherui Li(@zhrli324)开发并维护,当前版本 v0.1.0。
推荐 Skills