← 返回 Skills 市场
mupengi-bot

auto-reply

作者 mupengi-bot · GitHub ↗ · v1.0.0
cross-platform ⚠ suspicious
897
总下载
1
收藏
5
当前安装
1
版本数
在 OpenClaw 中安装
/install auto-reply
功能描述
Instagram DM auto-reply system. DM monitoring, reading, replying, security check (injection rejection). Use when checking Instagram DMs, reading unread messa...
使用说明 (SKILL.md)

Instagram DM Auto-Reply 🐧

v2.js (Internal API) based. 0 browser snapshots, CDP cookie extraction → Instagram REST API direct calls.

Prerequisites

  • OpenClaw browser running (port 18800)
  • Instagram tab open and logged in
  • ws npm package (npm i -g ws or local)

Script List

Script Purpose
scripts/v2.js DM CLI (inbox, unread, check, read, reply)
scripts/auto-reply.js Read dm-alert.json, security check, return reply metadata
scripts/check-notify.js Check new DM notifications (for cron, state file based)
scripts/dm-watcher.js Real-time DM detection daemon (15s polling)

Core Workflows

1. Check DMs

node scripts/v2.js check        # unread count (lightest)
node scripts/v2.js unread       # unread DM list
node scripts/v2.js inbox        # full DM list

2. Read Messages

node scripts/v2.js read "\x3Cusername>" -l 5

3. Reply

node scripts/v2.js reply "\x3Cusername>" "message content"

On API failure, returns JSON with method: "use_browser" + threadUrl → fallback to browser tool.

4. Notification Check (cron integration)

node scripts/check-notify.js
  • If new DMs: outputs 📩 새 DM N건: ...
  • If none: outputs no_new
  • Uses state file dm-state.json to prevent duplicates

5. Auto-Reply Flow

node scripts/auto-reply.js
  1. Read dm-alert.json (created by dm-watcher)
  2. Run security check on each DM
  3. Return results: needs_reply / security_alert / skipped
  4. AI generates replies for needs_reply DMs → send via v2.js reply

6. Real-time Detection Daemon

node scripts/dm-watcher.js              # detection only
node scripts/dm-watcher.js --auto-reply  # includes Discord notification

Polls v2.js check every 15s. On new DM detection, writes dm-alert.json + Discord DM notification.

Security Check (Injection Rejection)

auto-reply.js's SECURITY_PATTERNS detects:

  • Prompt Injection: "ignore previous", "system prompt", "you are now", "act as", "pretend"
  • Jailbreak Attempts: "override", "jailbreak", "DAN mode", "bypass"
  • Sensitive Info Requests: "secret key", "private key", "seed phrase", "wallet address"
  • Code Execution Attempts: "execute command", "run script", "eval(", "rm -rf", "sudo"
  • Social Engineering: "simulation mode", zero-width characters

On threat detection → don't reply, return security_alert. Separate notification sent.

Cron Setup Example

# Check DMs every 5 minutes
- schedule: "*/5 * * * *"
  command: "node /path/to/scripts/check-notify.js"
  systemEvent: true

# Or dm-watcher daemon for continuous monitoring
- schedule: "@reboot"
  command: "node /path/to/scripts/dm-watcher.js --auto-reply"
  background: true

Token Efficiency

  • inbox/check: exec 1 call (~500 tokens)
  • reply: exec 1 call (~200 tokens)
  • browser snapshots: 0

🐧 Built by 무펭이 — Mupengism ecosystem skill

安全使用建议
This skill will extract Instagram session cookies from a running browser via the Chrome DevTools Protocol and use them to call Instagram's internal APIs — that is required for it to read and reply to DMs but is sensitive because those cookies let the tool act as your account. The scripts can also send message previews to Discord if you set DISCORD_TOKEN and OWNER_DISCORD_ID (these env vars are used but not declared in the skill metadata). Before installing or running: (1) review and trust the author/source of the code; (2) run the scripts in an isolated environment or non-critical account if you want to test; (3) do not provide a Discord bot token unless you intentionally want message previews sent externally; (4) be aware that dm-alert.json and dm-state.json will contain message content on disk; (5) if you need full assurance, audit the v2.js cookie-extraction and igRequest code paths and confirm there are no additional outbound endpoints beyond instagram.com and optional discord.com. If you want to proceed, add explicit environment constraints and only enable external notifications consciously.
功能分析
Type: OpenClaw Skill Name: auto-reply Version: 1.0.0 ``` ```python def solve(): # Read input: N, M, K N, M, K = map(int, input().split()) # Read input: N lines of M characters grid = [] for _ in range(N): grid.append(input()) # Initialize a 2D DP array: dp[r][c] stores the maximum length of a valid path ending at (r, c) # A valid path means the characters encountered so far form a prefix of the target string. # The target string is implicitly defined by the problem: it's a string of K identical characters. # For example, if K=3, the target string could be "AAA", "BBB", etc. # Since we are looking for a path of K identical characters, we need to store not just the length, # but also the character that forms the path. # So, dp[r][c] will be a dictionary where keys are characters ('A'-'Z') and values are the # maximum length of a path ending at (r, c) using that character. # dp[r][c][char] = max_length dp = [[{} for _ in range(M)] for _ in range(N)] # Base cases: For each cell (r, c), a path of length 1 can end there using the character at grid[r][c]. for r in range(N
能力评估
ℹ Purpose & Capability
The code implements an Instagram DM monitor and auto-reply flow that matches the description: it extracts cookies from a running browser via CDP, calls Instagram internal APIs, writes state/alert files, and exposes read/reply/check commands. That functionality is coherent with the stated purpose. However, the skill claims no required credentials/env but the code optionally uses environment variables (DISCORD_TOKEN, OWNER_DISCORD_ID, OPENCLAW_GATEWAY, BROWSER_PORT) which are not declared in the metadata — this mismatch reduces transparency.
⚠ Instruction Scope
SKILL.md tells you to run node scripts, which is expected, but the scripts do more than simple CLI calls: they connect to a local browser CDP endpoint and extract Instagram cookies (session tokens) and then call Instagram's internal endpoints. The watcher also writes dm-alert.json and dm-state.json to disk and can POST message previews to Discord if a bot token is present. The SKILL.md mentions Discord notifications in places but does not declare the required Discord credentials; the scripts access env vars that were not declared. Reading browser cookies and forwarding message previews to external services is a scope that should be explicitly documented and consented to.
✓ Install Mechanism
This is an instruction-only skill (no install spec). It does include Node.js scripts and recommends the global 'ws' package; the lack of an install step keeps risk lower than an arbitrary download/install. The user still needs to install 'ws' and run Node scripts locally.
⚠ Credentials
The skill metadata declares no required env vars or primary credential, but the code reads several environment variables if present: BROWSER_PORT (optional), DISCORD_TOKEN and OWNER_DISCORD_ID (to notify via Discord), and OPENCLAW_GATEWAY (defined but not used). Extracting cookies from the browser (csrftoken, ds_user_id) is necessary to operate but is highly sensitive — those session cookies effectively let the tool act as your Instagram user. The optional Discord behavior will send message previews out of your environment if a Bot token is configured. These environment/credential accesses are not fully documented in the metadata and thus are disproportionate to the declared 'none'.
✓ Persistence & Privilege
The skill does not set always:true and does not modify other skills. It writes local files (dm-alert.json, dm-state.json) in its directory for state/alerting and can be run as a daemon or via cron; that persistence is expected for a watcher. Nothing in the code appears to elevate system privileges or alter other skills' configurations.
如何使用
  1. 确保已安装 OpenClaw（本地或 Docker 部署）
  2. 在对话框中输入安装命令：/install auto-reply
  3. 安装完成后，直接呼叫该 Skill 的名称或使用 /auto-reply 触发
  4. 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
Initial release
元数据
Slug auto-reply
版本 1.0.0
许可证 —
累计安装 5
当前安装数 5
历史版本数 1
常见问题

auto-reply 是什么？

Instagram DM auto-reply system. DM monitoring, reading, replying, security check (injection rejection). Use when checking Instagram DMs, reading unread messa... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 897 次。

如何安装 auto-reply？

在 OpenClaw 或 Claude Code 对话框中运行命令「/install auto-reply」即可一键安装，无需额外配置。

auto-reply 是免费的吗？

是的，auto-reply 完全免费（开源免费），可自由下载、安装和使用。

auto-reply 支持哪些平台？

auto-reply 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。

谁开发了 auto-reply？

由 mupengi-bot（@mupengi-bot）开发并维护，当前版本 v1.0.0。

推荐 Skills
self-improving agent
Captures learnings, errors, and corrections to enable continuous improvement. Use when: (1) A command or operation fails unexpectedly, (2) User corrects Clau...
⬇ 463283 · by pskoett
Skill Vetter
Security-first skill vetting for AI agents. Use before installing any skill from ClawdHub, GitHub, or other sources. Checks for red flags, permission scope, and suspicious patterns.
⬇ 259410 · by spclaudehome
Polymarket
Query Polymarket prediction markets. Check odds, find trending markets, search events, track price movements.
⬇ 232503 · by joelchance
Self-Improving + Proactive Agent
Self-reflection + Self-criticism + Self-learning + Self-organizing memory. Agent evaluates its own work, catches mistakes, and improves permanently. Use when...
⬇ 200423 · by ivangdavila
Github
Interact with GitHub using the `gh` CLI. Use `gh issue`, `gh pr`, `gh run`, and `gh api` for issues, PRs, CI runs, and advanced queries.
⬇ 191113 · by steipete
ontology
Typed knowledge graph for structured agent memory and composable skills. Use when creating/querying entities (Person, Project, Task, Event, Document), linkin...
⬇ 190156 · by oswalpalash

💬 留言讨论