← 返回 Skills 市场
487
总下载
0
收藏
2
当前安装
1
版本数
在 OpenClaw 中安装
/install multi-platform-publisher
功能描述
Publish content to X/Twitter, LinkedIn, WeChat Official Account, and Xiaohongshu with one command. Automatically adapts content format for each platform — th...
安全使用建议
This skill appears to implement the advertised multi-platform publisher, but pay attention to the following before installing or using it:
- The CLI and code require multiple sensitive credentials (Twitter API key/secret + token/secret, LinkedIn access token, WeChat appid/appsecret, and a Xiaohongshu browser cookie). The registry metadata incorrectly lists no required env vars — assume you must provide those secrets to use the skill.
- Xiaohongshu behavior: the adapter can delegate to an MCP server (default http://localhost:3001) or call XHS web APIs directly. If you (or your openclaw.json) set XHS_MCP_ENDPOINT to a remote host, the skill will send your content and base64-encoded images to that host. Only point it to a trusted, local MCP server; do not use an untrusted remote endpoint for the MCP setting.
- Sensitive storage: avoid placing long-lived credentials or cookies in shared/nebulous config files. If you must store credentials, use least-privilege tokens and a dedicated account when possible.
- Review and test in an isolated environment first: run the tool with --dry-run, validate credentials with the validate command, and inspect network traffic (or run in a sandbox) before giving it access to production accounts.
- If you plan to use Twitter/LinkedIn/WeChat, prefer short-lived OAuth tokens or accounts with limited permissions where possible. Consider auditing/locking the ~/.openclaw/openclaw.json entry to ensure it contains only expected keys for this skill.
Given the metadata mismatch and the MCP delegation risk, treat this skill as potentially privacy-risky until you confirm the MCP endpoint and credential handling meet your security requirements.
功能分析
Type: OpenClaw Skill
Name: multi-platform-publisher
Version: 1.0.0
The multi-platform-publisher skill is a legitimate tool designed to automate content posting across X/Twitter, LinkedIn, WeChat, and Xiaohongshu. The code follows standard practices for API integration, including OAuth 1.0a signing for Twitter (twitter_adapter.py) and credential management via environment variables or configuration files (config_loader.py). No evidence of data exfiltration, malicious execution, or prompt injection was found; all network requests are directed to the official API endpoints of the supported platforms.
能力评估
Purpose & Capability
The skill's description says it publishes to X/Twitter, LinkedIn, WeChat, and Xiaohongshu — and the code implements adapters for all four. However the registry metadata lists no required environment variables or credentials, while both SKILL.md and the code expect multiple sensitive credentials (Twitter API keys/secrets, LinkedIn access token, WeChat appid/appsecret, XHS_COOKIE, optional XHS_MCP_ENDPOINT). That metadata mismatch is an incoherence that could mislead users about what secrets are needed.
Instruction Scope
SKILL.md gives explicit runtime instructions (pip install, set env vars, or place them in ~/.openclaw/openclaw.json) and the code follows those instructions. The adapters perform network calls only to platform APIs (X, LinkedIn, WeChat), and Xiaohongshu either calls a local/default MCP server or the XHS web endpoints. The scope is consistent with the stated functionality, but the Xiaohongshu MCP path means the skill will send base64-encoded image payloads and content to whatever MCP endpoint is configured, which is a privileged network action and should be reviewed before use.
Install Mechanism
There is no platform install spec (instruction-only). A requirements.txt exists and SKILL.md tells users to run pip3 install requests tweepy Pillow. No remote downloads or archive extraction are present in the manifest. This is low risk compared to automatic binary downloads, but users must run pip installs themselves — dependency supply-chain risks are possible but not unusual for Python CLI tools.
Credentials
The adapters legitimately require platform credentials (Twitter API key/secret + access token/secret; LinkedIn access token; WeChat appid/appsecret; Xiaohongshu cookie). These are proportionate to the advertised capabilities, but they are highly sensitive. Two specific concerns: (1) Xiaohongshu requires a browser cookie (XHS_COOKIE) rather than an API token — cookies are particularly sensitive and long-lived. (2) The adapter supports delegating actions to an MCP endpoint (XHS_MCP_ENDPOINT). If that endpoint is set to an external server, content and images (base64) will be sent to that server, enabling exfiltration. Also the registry metadata claiming no required env vars is misleading about the number/sensitivity of credentials required.
Persistence & Privilege
The skill does not request 'always: true', does not claim to modify other skills or system-wide settings, and will only act when invoked. It does read ~/.openclaw/openclaw.json and a local config.json for configuration, which is consistent with its SKILL.md instructions.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install multi-platform-publisher - 安装完成后，直接呼叫该 Skill 的名称或使用
/multi-platform-publisher触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
Initial release — publish to X/Twitter, LinkedIn, WeChat, Xiaohongshu with one command
元数据
常见问题
Multi-Platform Publisher 是什么？
Publish content to X/Twitter, LinkedIn, WeChat Official Account, and Xiaohongshu with one command. Automatically adapts content format for each platform — th... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 487 次。
如何安装 Multi-Platform Publisher？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install multi-platform-publisher」即可一键安装，无需额外配置。
Multi-Platform Publisher 是免费的吗？
是的，Multi-Platform Publisher 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Multi-Platform Publisher 支持哪些平台？
Multi-Platform Publisher 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Multi-Platform Publisher？
由 mguozhen（@mguozhen）开发并维护，当前版本 v1.0.0。
推荐 Skills