← 返回 Skills 市场

Halo博客管理，文章发布

Name: Halo博客管理，文章发布
Author: binsonhao

作者 binsonHao · GitHub ↗ · v1.0.0 · MIT-0

cross-platform ⚠ suspicious

208

总下载

当前安装

版本数

在 OpenClaw 中安装

/install halo-manager

功能描述

通过官方API发布Halo博客文章，支持Markdown自动转换为HTML富文本，同时可查看和删除文章。

使用说明 (SKILL.md)

Halo Manager

Halo博客文章管理技能

功能

✅ 创建并发布文章
✅ Markdown转HTML富文本（加粗、斜体、列表、代码等）
✅ 查看文章列表
✅ 删除文章

安装

cd halo-manager
npm install

配置

设置环境变量：

export HALO_URL=https://你的博客地址
export HALO_TOKEN=你的PersonalAccessToken

获取Token：Halo后台 → 设置 → Token → 创建个人令牌

使用

# 发布文章
halo publish "标题" "内容"

# 查看列表
halo list

# 删除文章
halo delete "关键词"

Markdown语法

**加粗** → 加粗
*斜体* → 斜体
# 标题 → 大标题
`代码` → 代码
- 列表 → 列表项
换行用空行分隔段落

示例

halo publish "我的第一篇文章" "这是**加粗**和*斜体*测试

- 列表项1
- 列表项2

代码: `echo hello`"

技术说明

使用官方 @halo-dev/api-client
内容自动转换为HTML富文本格式
正确处理headSnapshot参数发布

安全使用建议

This skill appears to implement Halo publish/list/delete correctly, but do not install or run it until you verify a few things: 1) The package metadata should declare HALO_TOKEN (and optionally HALO_URL) as required — treat HALO_TOKEN as a secret. 2) Edit halo.js (or ensure you set HALO_URL) so it does NOT default to 'https://yingdong.top' — that default will cause any HALO_TOKEN you export to be sent to that domain. 3) Install from a trusted registry (the package-lock uses an http Tencent mirror; prefer official npm registry) and run npm audit. 4) Inspect @halo-dev/api-client source/package (verify its integrity and that it points to the real Halo client). 5) When testing, use a limited-scope or throwaway token first. If the author updates metadata to declare required env vars and removes or changes the unsafe default HALO_URL, this would reduce the main concerns.

能力评估

⚠ Purpose & Capability

The name/description match the code (uses @halo-dev/api-client and axios to create, update, publish, list, delete posts). However the registry metadata lists no required environment variables or primary credential, while both SKILL.md and the code require HALO_TOKEN (and recommend HALO_URL). Metadata should declare HALO_TOKEN as a required credential.

⚠ Instruction Scope

SKILL.md instructs the user to set HALO_URL and HALO_TOKEN and to run npm install and the CLI — that matches the code. But the code has a hardcoded default HALO_URL = 'https://yingdong.top'. If a user sets HALO_TOKEN but forgets to set HALO_URL, the token will be sent to that default host. SKILL.md does not warn about this risky default.

ℹ Install Mechanism

There is no automated install spec; installation is manual via npm install (documented in SKILL.md). Dependencies come from npm (package-lock.json). Resolved URLs in package-lock use a Tencent mirror over http which is unusual and could be a security concern (integrity fields exist, but http mirrors can be risky). No arbitrary remote archive/extract steps are present in the skill itself.

⚠ Credentials

The skill legitimately requires a Halo Personal Access Token (HALO_TOKEN) and the blog URL (HALO_URL). Those are proportionate to the stated purpose — but they are not declared in the skill metadata. The hardcoded default HALO_URL pointing to a third-party domain means a user-supplied HALO_TOKEN could be accidentally sent to that domain, which is a high-risk mismatch between declared requirements and actual behavior.

✓ Persistence & Privilege

The skill does not request persistent 'always' inclusion and does not modify other skills or system-wide settings. It runs as a CLI when invoked; normal autonomous invocation flags are default and not excessive here.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install halo-manager
安装完成后，直接呼叫该 Skill 的名称或使用 /halo-manager 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v1.0.0

Initial release of halo-manager – a Halo博客管理技能. - 支持创建并发布文章，自动将Markdown语法转为HTML富文本（加粗、斜体、列表、代码等）。 - 支持查看博客文章列表。 - 支持通过关键词删除文章。 - 简单命令行界面，易于集成和配置。 - 基于官方@halo-dev/api-client实现。

元数据

Slug halo-manager

版本 1.0.0

许可证 MIT-0

累计安装 0

当前安装数 0

历史版本数 1

常见问题