redbookskills

将图文/视频内容自动发布到小红书（XHS）。 支持三类任务：发布图文、发布视频、仅启动测试浏览器（不发布）。

This skill appears to implement what it claims, but it is powerful and interacts with sensitive local resources. Before installing or running it: - Only use with test accounts or Chrome profiles you are willing to grant automated access to (it uses user-data-dirs and can read/use cookies/sessions). - Review and back up any Chrome profile directories you care about; the account manager can delete profile dirs with a flag. - Be cautious when passing a remote --host/--port: connecting to a remote CDP exposes whatever Chrome that host controls and could be used to operate on pages or exfiltrate data. Avoid supplying remote hosts unless you fully trust them. - The skill will download media from arbitrary URLs into temp directories; verify URLs before use and clean up temp files if needed. - There is at least one small code-quality issue (missing timedelta import) that could cause runtime errors; consider running the scripts manually in a controlled environment first. - If you plan to let an autonomous agent invoke this skill, limit the agent's privileges and ensure prompts/inputs are validated (e.g., avoid giving it paths to sensitive local files or administrative profile names).

Type: OpenClaw Skill Name: redbookskills Version: 1.0.0 The skill bundle provides a comprehensive Xiaohongshu (XHS) automation toolkit using the Chrome DevTools Protocol (CDP). While the logic is aligned with the stated purpose of content publishing, it employs several high-risk capabilities, including programmatic browser control, network traffic interception to capture API responses (found in `cdp_publish.py`), and remote media downloading (`image_downloader.py`). The scripts also manage sensitive browser profile data in the user's local application directory (`account_manager.py`). Although the instructions in `SKILL.md` include safety constraints such as requiring user confirmation before publishing, the inherent risks associated with automated browser manipulation and the potential for credential handling via CDP warrant a cautious classification.