← 返回 Skills 市场
96
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install mux-social-media-automation
功能描述
自动管理小红书和微信视频号多账号内容发布，支持内容模板、合规审查和数据追踪生成日报。
安全使用建议
This skill appears to implement the promised social-media automation features, but several red flags mean you should be cautious: (1) The listing metadata ownerId differs from the _meta.json ownerId — verify the publisher/registry identity before trusting code. (2) The skill requires sensitive secrets (platform access tokens, cookies, Feishu webhook) even though it declares none; do not run it with real credentials until you confirm where/how secrets are stored. (3) The doc suggests storing an encryption key and encrypted credentials in .credentials/ and the example uses a local Fernet key file — storing the encryption key alongside encrypted data or in the repository is insecure. Prefer a dedicated secret manager or OS-level protected storage. (4) Browser automation can capture login sessions (including MFA cookies); review code that loads cookies and make sure it does not exfiltrate them. (5) There are contradictory recommendations (gpg/pass vs Fernet) — ask the author for a single, secure secret-handling plan and for explicit env var names for any webhooks/API tokens. Recommended next steps: verify the package owner, get the full source code (not only SKILL.md) and an explanation of secret storage and Feishu endpoint usage, and run the code in an isolated environment with least-privilege test credentials. If you cannot validate the author or confirm safe secret handling, do not install or run this skill with production credentials.
功能分析
Type: OpenClaw Skill
Name: mux-social-media-automation
Version: 1.0.0
The skill bundle provides a comprehensive framework for automating social media posts on Xiaohongshu and WeChat Video Channels. The SKILL.md and included code snippets (AccountManager, Publisher) focus on legitimate automation tasks such as credential management with encryption (cryptography.fernet), API integration, and browser automation via Playwright. There is no evidence of data exfiltration, prompt injection attacks, or malicious execution; the workflow is transparently aligned with its stated purpose of social media management.
能力评估
Purpose & Capability
The SKILL.md content matches the stated purpose (Xiaohongshu and 微信视频号 automation, templates, tracking, reports). However registry/_meta metadata mismatch (ownerId differs between listing and _meta.json) and the package declares no required credentials while the instructions and example code clearly require API tokens, cookies, and webhooks. That mismatch is unexpected and reduces trust.
Instruction Scope
Runtime instructions instruct the agent to read/write local credential files (.credentials/), load cookies, launch browsers for automation, call platform APIs, and send daily reports to Feishu. Those actions are within the skill's functional scope but the instructions also reference unspecified external endpoints and secret material without clear limits, and they instruct storing and loading keys/cookies from disk — which broadens the data the agent will touch.
Install Mechanism
No install spec and no code files in the package delivered to the agent (instruction-only). That minimizes installer risk since nothing arbitrary is downloaded or written by an installer. The SKILL.md includes example code, but no automatic install steps are declared.
Credentials
The skill declares no required env vars/primary credential, yet examples and scheduler use ACCESS_TOKEN, cookies, and a Feishu webhook (send_to_feishu). The doc also instructs storing secrets in .credentials and gives conflicting encryption guidance (recommend gpg/pass but example code uses cryptography.Fernet with a local key file). Requiring/manage many secrets without declaring them and suggesting a local encryption key file (.credentials/key.key) is disproportionate and insecure if not handled carefully.
Persistence & Privilege
The example includes a scheduler that runs periodic publishing and reporting jobs, which implies long-running processes if deployed. The skill does not request always:true and does not modify other skills, so it does not ask for elevated platform privileges — but the agent/operator must be aware this will perform recurring actions and will access stored credentials over time.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install mux-social-media-automation - 安装完成后，直接呼叫该 Skill 的名称或使用
/mux-social-media-automation触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
Initial release of social-media-automation skill:
- Automates end-to-end publishing and management workflows for Xiaohongshu and WeChat Channels.
- Supports multi-account configuration, posting via official APIs or browser automation, and compliance management.
- Includes content template library, content scheduling, auto-reporting with data tracking, and encrypted credential management.
- Provides troubleshooting guidance, performance metrics, and iterative workflow for ongoing optimization.
元数据
常见问题
Social Media Automation 是什么？
自动管理小红书和微信视频号多账号内容发布，支持内容模板、合规审查和数据追踪生成日报。 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 96 次。
如何安装 Social Media Automation？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install mux-social-media-automation」即可一键安装，无需额外配置。
Social Media Automation 是免费的吗？
是的，Social Media Automation 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Social Media Automation 支持哪些平台？
Social Media Automation 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Social Media Automation？
由 Dally-bee（@dally-bee）开发并维护，当前版本 v1.0.0。
推荐 Skills