XHS_Content productionandpublishing

Automatically publish notes to Xiaohongshu (小红书) creator center. Generates cover images (PIL poster, multiple styles), writes content from templates, and pub...

This skill appears to do what it claims: generate content and images locally and automate posting to creator.xiaohongshu.com via a local Playwright browser. Before installing/using it: 1) Review the scripts locally and run them in an environment you control (not a production machine) so you can inspect behavior. 2) Be cautious about enabling persistence: if you run save_login.py it will store login cookies in a profile directory (default: .local/xhs_browser_profile) — anyone or any automated process with access to that directory could post as you. 3) Playwright will download a browser binary when you run 'playwright install chromium' — this is expected but may be large. 4) If you plan to allow autonomous agent invocation, understand the agent could run publish.py using any saved profile and post without further prompts; consider restricting autonomous use or using an ephemeral test account for initial runs. 5) There are no obvious exfiltration endpoints or secret reads in the code, but always run third-party code in an isolated environment if you have concerns.

Type: OpenClaw Skill Name: xhsredbook Version: 1.0.1 The skill bundle is a legitimate automation tool for generating and publishing content to the Xiaohongshu (Red Note) creator center. It utilizes Playwright for browser automation and Pillow for local image generation, with all sensitive data such as browser profiles and screenshots stored locally in a '.local' directory. The code is transparent, lacks obfuscation, and contains no evidence of data exfiltration, unauthorized network calls, or malicious prompt injection.