← 返回 Skills 市场
fuzhengwei

xfg-zsxq-skills

作者 小傅哥 · GitHub ↗ · v2.3.0 · MIT-0
cross-platform ✓ 安全检测通过
171
总下载
1
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install xfg-zsxq-skills
功能描述
知识星球自动化技能。支持发帖、回帖、浏览帖子、检查通知、自动回帖、自动发帖。自动读取 ~/.xfg-zsxq/groups.json 配置。支持定时任务自动检查通知和被圈提醒。回复功能使用浏览器自动化(Playwright MCP)。触发词:'知识星球'、'发帖'、'回帖'、'zsxq'、'检查通知'、'浏览帖子...
安全使用建议
This skill is coherent with its stated purpose but it handles sensitive data: it asks you to paste your full 知识星球 Cookie (contains zsxq_access_token). Before installing or running: 1) Review the scripts yourself and only store cookies you trust this tool with; the tool saves them under ~/.xfg-zsxq/groups.json (recommend file mode 600 and only use on accounts you control). 2) Be aware browser automation requires installing puppeteer (package.json) or using the platform's browser actions; follow README instructions and install dependencies in an isolated environment if possible. 3) Image uploads go to qiniu (upload-z1.qiniup.com) which is expected for the service but note third-party storage. 4) If you expect the agent to run autonomously, understand scheduled task instructions only produce config and CLI commands — the script doesn't silently create system cron jobs. 5) Minor docs mismatch: SKILL.md mentions Playwright while package.json lists puppeteer; confirm which automation tool you'll run. If any of this is unexpected, do not provide your cookie or run the scripts until you are comfortable.
功能分析
Type: OpenClaw Skill Name: xfg-zsxq-skills Version: 2.3.0 The bundle is a comprehensive automation toolkit for the 'Knowledge Planet' (ZSXQ) platform, enabling users and AI agents to manage posts, replies, and notifications. It handles sensitive authentication cookies by storing them locally in the user's home directory (~/.xfg-zsxq/groups.json) with appropriate file permissions (600). The scripts (e.g., zsxq.js, zsxq-auto-check.js) interact exclusively with legitimate service endpoints like api.zsxq.com and upload-z1.qiniup.com. All functionalities, including signature generation and cron job integration for the OpenClaw agent, are transparently documented and strictly aligned with the stated purpose of the skill.
能力评估
Purpose & Capability
The name/description describe automation for 知识星球 (post, reply, check notifications, cron). The repository includes scripts that implement those features and read/write ~/.xfg-zsxq/groups.json. Required capabilities (HTTP requests to api.zsxq.com, cookie-based auth, optional image upload to qiniu) match the stated purpose. There is a minor doc mismatch: SKILL.md mentions Playwright MCP for browser automation while package.json lists puppeteer as a dependency; this is a documentation/implementation inconsistency but does not indicate malicious behavior.
Instruction Scope
SKILL.md and scripts instruct the agent/user to obtain and store the full site Cookie and to run local Node scripts. The runtime instructions explicitly reference only the knowledge-planet APIs, the local config path (~/.xfg-zsxq/groups.json), and the OpenClaw browser tooling for interactive automation. There are no instructions to read unrelated system files or to exfiltrate data to unexpected endpoints beyond api.zsxq.com and qiniu (used for image upload).
Install Mechanism
This is instruction- and script-based with no platform install spec. A package.json declares 'puppeteer' (heavy dependency) but there is no automated install step described; users will need to npm install if they want browser automation. Because no install script runs automatically, there's lower installer risk, but users should be aware that dependencies (puppeteer) are required for automated browser actions.
Credentials
The skill requires the user's 知识星球 cookie (zsxq_access_token) stored in ~/.xfg-zsxq/groups.json and uses it to call api.zsxq.com. Requesting the cookie is proportionate to performing authenticated post/reply operations. The code stores configuration with file mode 0o600 (README claims permission 600), which is appropriate for sensitive tokens. No unrelated environment variables or unrelated service credentials are requested.
Persistence & Privilege
always:false and no special OS-wide privileges are requested. Scripts read/write files under the user's home (~/.xfg-zsxq and cron-config.json) which is expected for a per-user automation tool. The cron-setup script writes a cron-config JSON and prints OpenClaw CLI commands but does not autonomously register system cron jobs or modify other skills' configurations.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install xfg-zsxq-skills
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /xfg-zsxq-skills 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v2.3.0
- 新增详细的 SKILL.md 文档,完善了各项功能使用说明。 - 支持发帖、回帖、浏览帖子、检查通知、自动回帖和定时任务等自动化流程。 - 回帖功能现采用浏览器自动化(Playwright MCP)提升兼容性。 - 丰富常见问题、API 状态、项目结构和 Cookie 配置说明,便于使用和排查。 - 触发词与路由功能增强,更好适配自动响应和用户操作习惯。
元数据
Slug xfg-zsxq-skills
版本 2.3.0
许可证 MIT-0
累计安装 0
当前安装数 0
历史版本数 1
常见问题

xfg-zsxq-skills 是什么?

知识星球自动化技能。支持发帖、回帖、浏览帖子、检查通知、自动回帖、自动发帖。自动读取 ~/.xfg-zsxq/groups.json 配置。支持定时任务自动检查通知和被圈提醒。回复功能使用浏览器自动化(Playwright MCP)。触发词:'知识星球'、'发帖'、'回帖'、'zsxq'、'检查通知'、'浏览帖子... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 171 次。

如何安装 xfg-zsxq-skills?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install xfg-zsxq-skills」即可一键安装,无需额外配置。

xfg-zsxq-skills 是免费的吗?

是的,xfg-zsxq-skills 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

xfg-zsxq-skills 支持哪些平台?

xfg-zsxq-skills 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 xfg-zsxq-skills?

由 小傅哥(@fuzhengwei)开发并维护,当前版本 v2.3.0。

💬 留言讨论