← 返回 Skills 市场
sonnenberglauramarie-afk

Max Content Machine

作者 sonnenberglauramarie-afk · GitHub ↗ · v1.0.0
cross-platform ⚠ suspicious
440
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install max-content-machine
功能描述
Autonomous 24/7 affiliate content production pipeline for OpenClaw agents. Orchestrates research → brief → article writing → quality gate → deploy. Supports...
安全使用建议
Do not install or enable this skill until you validate a few items: 1) Obtain the full source repository or the actual pipeline scripts (quality_gate.py, pipeline_controller.py, post_article.py, etc.) and review them for hidden network endpoints, credential exfiltration, or obfuscated logic. 2) Require the skill to declare exact environment variables it needs (e.g., CLOUDFLARE_API_TOKEN, CLOUDFLARE_ACCOUNT_ID, AMAZON_AFFILIATE_TAG) and explain where/how they are stored (avoid embedding secrets in plaintext files). 3) Confirm which Cloudflare account will be used and limit the token scope to only what is needed (deploy & cache-purge). 4) Run the pipeline in an isolated/test environment first and audit network calls and file writes. 5) If you must allow autonomous invocation, restrict its permissions and monitor its activity (audit logs, rotated tokens). Because the skill can publish content and use affiliate links, also verify it complies with your legal/policy requirements for automated publishing and affiliate disclosures.
功能分析
Type: OpenClaw Skill Name: max-content-machine Version: 1.0.0 The skill bundle describes an automated affiliate content pipeline for research, writing, and deployment to Cloudflare. While it requests high-privilege tools such as Bash and WebFetch in SKILL.md, these are consistent with the stated goals of executing deployment scripts (wrangler) and performing SERP analysis; no evidence of malicious intent, data exfiltration, or prompt injection was found in the provided files.
能力评估
Purpose & Capability
The claimed purpose (automated research→write→quality→deploy pipeline) aligns with the listed actions (running quality checks, using wrangler to deploy to Cloudflare, updating sitemaps). However the skill does not include any of the scripts it instructs the agent to run (quality_gate.py, pipeline_controller.py, post_article.py, etc.), and the registry metadata declares no required env vars or binaries even though Cloudflare and Amazon affiliate integration are central to the stated purpose. That mismatch is unexpected but not impossible (the skill may rely on the user's existing repo), so it is a design inconsistency rather than definitive malice.
Instruction Scope
SKILL.md instructs the agent to read and write many local files (KEYWORD-BACKLOG.md, article templates, sitemap), run local scripts (python3 quality_gate.py), and perform network actions (wrangler deploy, cache purge). It also tells the user to "Set up Cloudflare API token" and to configure Amazon affiliate tags. The instructions are specific about actions but do not say how secrets should be provided or protected. Because the skill is instruction-only and references non-included scripts, an agent acting on these instructions could access arbitrary workspace files and publish content using external credentials—the scope is broad and the absence of included code makes the runtime behavior opaque.
Install Mechanism
There is no install spec and no code files; this is instruction-only. That minimizes supply-chain install risk (nothing will be downloaded or written by an installer), but it also means the scanner had no code to analyze and the agent will rely on user-provided scripts and system tooling (python, wrangler).
Credentials
The instructions require a Cloudflare API token and Amazon affiliate tags for normal operation, but the skill metadata declares no required environment variables or primary credential. This omission is inconsistent and risky: the agent will need credentials to deploy and insert affiliate links, yet there is no guidance in the skill about how to supply or scope those credentials, and no explicit required env vars were declared. That increases the chance of misconfiguration or accidental credential exposure.
Persistence & Privilege
The skill is not marked always:true and uses default autonomous invocation settings. That is normal for an automation skill that is expected to run pipeline tasks. There is no evidence the skill attempts to modify other skills or agent-wide configuration. Still, because it performs publishing actions, granting it autonomous execution should be considered carefully.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install max-content-machine
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /max-content-machine 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
Autonomous 24/7 affiliate content production pipeline with Cloudflare Workers deploy
元数据
Slug max-content-machine
版本 1.0.0
许可证
累计安装 0
当前安装数 0
历史版本数 1
常见问题

Max Content Machine 是什么?

Autonomous 24/7 affiliate content production pipeline for OpenClaw agents. Orchestrates research → brief → article writing → quality gate → deploy. Supports... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 440 次。

如何安装 Max Content Machine?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install max-content-machine」即可一键安装,无需额外配置。

Max Content Machine 是免费的吗?

是的,Max Content Machine 完全免费(开源免费),可自由下载、安装和使用。

Max Content Machine 支持哪些平台?

Max Content Machine 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Max Content Machine?

由 sonnenberglauramarie-afk(@sonnenberglauramarie-afk)开发并维护,当前版本 v1.0.0。

💬 留言讨论