← 返回 Skills 市场
112
总下载
1
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install wordpress-blogger
功能描述
Publish articles to WordPress blogs via REST API. Handles post creation, category/tag management, and SEO-friendly English slug generation. Use when user ask...
安全使用建议
This skill appears to do what it says (publish posts to WordPress), but the SKILL.md expects sensitive credentials in a workspace .env and reads a specific path (/root/.openclaw/workspace/.env) while the skill metadata declares no required env vars or config paths. Before installing: 1) confirm the source/author and trustworthiness since no homepage/source is provided; 2) require the pack author to update metadata to declare WP_BLOG_URL, WP_USERNAME, WP_APP_PASSWORD (and mark WP_APP_PASSWORD as the primary credential) and to list the config path being read; 3) prefer using a WordPress application password tied to a low-privilege user and test on a staging site first (not a production blog); 4) be aware the instructions publish posts with status "publish" — if you want drafts first, modify the workflow; 5) rotate/revoke the application password after testing. If the author cannot or will not fix the metadata discrepancies, treat installation as higher risk and avoid granting credentials.
功能分析
Type: OpenClaw Skill
Name: wordpress-blogger
Version: 1.0.0
The wordpress-blogger skill is designed to publish articles to WordPress sites via the REST API. It follows a standard workflow of reading credentials from a local .env file, managing categories/tags, and creating posts using curl. The logic is transparent, aligns with the stated purpose, and lacks indicators of malicious intent or data exfiltration beyond the intended WordPress endpoint.
能力评估
Purpose & Capability
The name/description (publish to WordPress, manage categories/tags, generate slugs) align with the runtime steps (calls to the WP REST API to create categories, tags, and posts). Requiring a WordPress URL, username, and application password is appropriate for this functionality, so the actual capability is coherent with the purpose.
Instruction Scope
The SKILL.md instructs the agent to source a specific workspace file (/root/.openclaw/workspace/.env) and expects WP_BLOG_URL, WP_USERNAME, and WP_APP_PASSWORD to be present. That file path and those variables are not declared in the skill metadata. The instructions also specify automatically publishing posts (status: "publish") and include a directive to 'TRIGGER this skill whenever user mentions publishing', which increases the impact if invoked autonomously. Aside from these issues, the actions stay within the WordPress REST API domain.
Install Mechanism
This is an instruction-only skill with no install spec and no code files. That is the lowest-risk install model (nothing is written to disk by the skill package itself).
Credentials
The runtime requires WP_BLOG_URL, WP_USERNAME, and WP_APP_PASSWORD (an application password) in a workspace .env, but the registry metadata lists no required env vars or config paths and has no primary credential declared. This mismatch is significant: the skill will consume sensitive credentials but does not declare them in metadata for reviewers or policy controls.
Persistence & Privilege
always is false and the skill is user-invocable; model invocation is allowed (the platform default). The SKILL.md's explicit 'TRIGGER' text encourages automatic invocation when users mention publishing; combined with the missing-declaration issues above, that increases risk but by itself is not a platform privilege escalation.
如何使用
- 确保已安装 OpenClaw(本地或 Docker 部署)
- 在对话框中输入安装命令:
/install wordpress-blogger - 安装完成后,直接呼叫该 Skill 的名称或使用
/wordpress-blogger触发 - 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
Initial release of the WordPress Blog Publisher skill.
- Publish articles to WordPress blogs via REST API with post creation support.
- Automatically manages categories and tags—including checking existence, creating if needed, and assigning them.
- Generates SEO-friendly English slugs from article titles.
- Converts markdown content to HTML before publishing.
- Outputs the public URL, assigned category, and tags after successful publication.
- Credentials required via environment variables for secure publishing.
元数据
常见问题
Blog with Wordpress 是什么?
Publish articles to WordPress blogs via REST API. Handles post creation, category/tag management, and SEO-friendly English slug generation. Use when user ask... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 112 次。
如何安装 Blog with Wordpress?
在 OpenClaw 或 Claude Code 对话框中运行命令「/install wordpress-blogger」即可一键安装,无需额外配置。
Blog with Wordpress 是免费的吗?
是的,Blog with Wordpress 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。
Blog with Wordpress 支持哪些平台?
Blog with Wordpress 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。
谁开发了 Blog with Wordpress?
由 Hugo Gu(@hugogu)开发并维护,当前版本 v1.0.0。
推荐 Skills