← 返回 Skills 市场
apex-stack-ai

Blog Cross-Publisher Lite

作者 apex-stack-ai · GitHub ↗ · v1.0.0 · MIT-0
cross-platform ⚠ suspicious
84
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install blog-cross-publisher-lite
功能描述
Publish markdown articles to Dev.to via their REST API. Use this skill whenever the user wants to publish a blog post or article to Dev.to.
使用说明 (SKILL.md)

Blog Publisher Lite

Publish markdown articles to Dev.to directly from a markdown file using their REST API.

Want cross-posting to Medium and Hashnode too? Upgrade to Blog Cross-Publisher (Full)

What You Need

A Dev.to API key. Get one at https://dev.to/settings/extensions

Article Format

Write your article in standard markdown. The skill extracts the title from the first # heading, tags from the *Tags:* line, and everything after --- becomes the body.

Publishing

python scripts/publish_devto.py article.md --api-key YOUR_API_KEY --publish
Flag What It Does
--publish Publish immediately (omit for draft)
--tags "seo,webdev" Override tags from the file

API Details

POST https://dev.to/api/articles with api-key header and JSON body. Max 4 tags, lowercase.

Troubleshooting

  • 401: API key invalid. Generate new one at dev.to/settings/extensions
  • 422: Check title present, tags \x3C= 4, valid body_markdown
  • 429: Rate limited. Wait 30 seconds.

Built by Apex Stack — tools for developers who ship.

安全使用建议
This skill appears to describe a simple Dev.to publisher, but there are two practical inconsistencies you should resolve before using it: (1) SKILL.md says you need a Dev.to API key but the metadata doesn't declare any required credential — treat this as a missing/undeclared secret requirement; (2) the instructions call a local script (scripts/publish_devto.py) that is not included in the skill package. Do not paste your API key into a command line until you have reviewed the publishing script's source or obtained it from a trusted origin. Prefer providing the API key via a secure environment variable or prompting rather than as a CLI argument (to avoid shell-history/process-list exposure). Ask the publisher for the missing script or supply your own implementation that calls https://dev.to/api/articles, and verify its code before running. If you cannot validate the script or source, treat the skill as untrusted.
功能分析
Type: OpenClaw Skill Name: blog-cross-publisher-lite Version: 1.0.0 The skill bundle consists of documentation for a utility to publish markdown articles to Dev.to. The instructions in SKILL.md are consistent with the stated purpose, providing clear usage guidelines and API troubleshooting steps without any evidence of malicious intent or prompt injection.
能力评估
Purpose & Capability
Name/description and the instructions consistently describe publishing Markdown to Dev.to, which is coherent. However, the SKILL.md explicitly requires a Dev.to API key while the skill metadata declares no required credentials or primaryEnv, and no code files are included despite referencing a 'scripts/publish_devto.py' script. That mismatch (stated need for a secret but not declared, plus a referenced script that doesn't exist in the bundle) is inconsistent with the stated purpose.
Instruction Scope
The SKILL.md gives narrow, well-scoped runtime instructions: parse a Markdown file, construct a JSON payload, and POST to https://dev.to/api/articles with the api-key header. It does not instruct reading unrelated system files. The practical problem: it instructs running a local Python script at scripts/publish_devto.py, but there is no script in the package — so the agent or user would need to supply or fetch that code, which expands the actual behavior beyond what's bundled.
Install Mechanism
There is no install spec and no code files, which is low risk on its own. However, because the instructions reference an external script that is not provided, an operator/agent may attempt to obtain or generate that script elsewhere; that missing artifact is an operational gap to resolve before trusting the skill.
Credentials
The SKILL.md requires a Dev.to API key (sensitive credential) but the skill metadata declares no required environment variables or primary credential. This is an incoherence: a credential is needed for the task but is not declared. Also, the example shows passing the API key on the command line (python ... --api-key YOUR_API_KEY), which can leak the key in shell history or process listings — a security consideration the instructions do not address.
Persistence & Privilege
The skill does not request always:true, does not modify other skills, and has no install-time persistence. Agent autonomy is enabled by default (disable-model-invocation: false) but that is normal and not by itself concerning here.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install blog-cross-publisher-lite
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /blog-cross-publisher-lite 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
Initial release of Blog Publisher Lite for Dev.to. - Publish Markdown articles directly to Dev.to using their REST API. - Supports extracting the title, tags, and body from standard Markdown files. - Simple CLI for publishing as draft or live with customizable tags. - Includes troubleshooting tips for common API errors. - Requires a Dev.to API key for authentication.
元数据
Slug blog-cross-publisher-lite
版本 1.0.0
许可证 MIT-0
累计安装 0
当前安装数 0
历史版本数 1
常见问题

Blog Cross-Publisher Lite 是什么?

Publish markdown articles to Dev.to via their REST API. Use this skill whenever the user wants to publish a blog post or article to Dev.to. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 84 次。

如何安装 Blog Cross-Publisher Lite?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install blog-cross-publisher-lite」即可一键安装,无需额外配置。

Blog Cross-Publisher Lite 是免费的吗?

是的,Blog Cross-Publisher Lite 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

Blog Cross-Publisher Lite 支持哪些平台?

Blog Cross-Publisher Lite 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Blog Cross-Publisher Lite?

由 apex-stack-ai(@apex-stack-ai)开发并维护,当前版本 v1.0.0。

💬 留言讨论