小红书爆款文案生成（她势自游版）

小红书爆款文案生成技能。用于生成小红书爆款文案、排期表管理、热点分析、配套封面生成等任务。触发词：/小红书文案 /爆款文案 /生成排期表 /文案排期 /小红书爆款 /爆款流水线 /生成封面 /封面生成。适用于运营小红书账号、需要批量生成文案素材和封面的团队。

This skill appears to do what it says (generate copy, schedules, and image covers), but it embeds apparent Feishu tokens/folder IDs in the instructions and instructs automatic deletion of conflicting records before writing. Before installing or running: 1) Confirm who owns the embedded app_token/table_id values and whether they are valid — hard-coded tokens in a skill can grant access to someone else's tables. 2) Ensure you explicitly authorize any writes or deletions to your Feishu tables — the skill will delete conflicting rows automatically. 3) Ask the publisher to remove hard-coded credentials and instead require you to provide credentials explicitly (or document the exact access model). 4) If you cannot verify the tokens' ownership, treat the skill as untrusted and do not allow it to perform writes against your account. If you want a safer setup, request the skill be modified to: prompt for/require credentials via secure env vars, show a preview of changes before performing deletes, and document what external tools (e.g., image_generate) it will call.

Type: OpenClaw Skill Name: xhs-bahamo-copywriter Version: 1.1.0 The skill bundle contains multiple hardcoded Feishu (Lark) 'app_token' strings and 'table_id' values within SKILL.md (e.g., Mz8ybqtVZaU7qrs3zZYcmUssn4d). While these appear to be configuration for the stated purpose of managing Xiaohongshu marketing schedules, hardcoding sensitive credentials in the instruction file exposes the underlying data infrastructure to unauthorized access. The logic also includes a 'delete before write' conflict resolution rule which, while functional, could lead to data loss if the agent misidentifies records.