threads-skill

Threads 平台全自動化操作套件。觸發詞：登錄、登出、檢查登錄、是否已登錄、切換帳號、清除Cookie、多帳號管理、搜索、查找、瀏覽首頁、刷一下、抓帖子、獲取帖子、看帖子詳情、查看用戶、用戶主頁、歷史回復、發帖、發布、寫帖子、po文、發Thread、帶圖發帖、點讚、轉發、回覆、評論、關注、批量回覆、批量評論、...

This skill appears to be a CLI-based Threads automation tool, but the package contains only instructions (no scripts). Before using it: 1) Inspect the code on the linked GitHub repository and verify the scripts referenced by SKILL.md (scripts/*.py, chrome_launcher.py, reply_assistant.py) — do not run unknown scripts. 2) Confirm what the 'uv' binary refers to and whether you need to install it; SKILL.md uses 'uv run' but metadata only lists python3 and uv, and also mentions brew for tkinter without declaring it. 3) Be cautious about allowing access to your browser cookies or running delete-cookies/login flows — these touch sensitive authentication state. 4) If you plan to use the optional AI features, keep API keys out of world-readable files and prefer to supply credentials via secure environment variables or a credential manager; ask the publisher where credentials are stored and how they're transmitted. 5) Prefer running the tool in an isolated environment (VM/container) and audit network calls that the actual scripts make (especially external api_url endpoints) before granting any secrets or running automated posting actions.

Type: OpenClaw Skill Name: threads-skill Version: 1.0.3 The skill bundle is classified as suspicious because SKILL.md provides detailed instructions for an AI agent to execute several Python scripts (e.g., scripts/cli.py, scripts/chrome_launcher.py) that are entirely missing from the bundle, and it references a hardcoded external script path on the user's desktop (~/Desktop/threads-filter-comment/filter-comment.py). This reliance on missing or external code for sensitive tasks like account management, cookie handling, and browser control is a significant security risk. Additionally, _meta.json contains a future-dated timestamp (2026), and the instructions include specific behavioral constraints that override user preferences, such as automatically skipping political content and enforcing Traditional Chinese (IOC: github.com/gaojiongwenv587-beep/threads-skills).