Toutiao Mcp

通过 MCP 协议操作今日头条平台，支持内容发布、账号管理等功能

This skill delegates real work to a third‑party npm MCP server (toutiao-mcp) that will run browser automation, store session cookies locally, and read/write image and data files. Before installing or running it: 1) Review the referenced GitHub repo and the npm package code (and recent release history) to confirm it doesn't exfiltrate data or phone home to unfamiliar endpoints. 2) Treat the COOKIES_FILE as sensitive — set its path to a directory with tight permissions and avoid using high-value accounts during testing. 3) Run the MCP server in an isolated environment (container or VM) if you cannot fully audit dependencies. 4) Prefer installing from the official GitHub/npm package (not a random URL); check package integrity and recent issues. 5) Note the SKILL.md references env vars (PLAYWRIGHT_HEADLESS, COOKIES_FILE, DATA_DIR) even though the registry lists none — ensure you configure those securely. 6) Monitor network activity while testing (to detect unexpected uploads). If you cannot review the third‑party code or run it in isolation, consider this skill risky for accounts or data you care about.

Type: OpenClaw Skill Name: toutiao-mcp-skill Version: 0.1.0 The skill bundle provides a legitimate Model Context Protocol (MCP) integration for automating the Toutiao (今日头条) platform, supporting content publishing and account management. It uses Playwright for browser automation and stores session cookies locally, which are standard requirements for its stated purpose. The instructions in SKILL.md and the reference documentation are transparent, follow best practices for manual login to handle sensitive credentials, and show no evidence of malicious intent, data exfiltration, or prompt injection.