by 安全扫描
OpenClaw
安全
medium confidenceThe skill's code and instructions are consistent with a Playwright-based multi-platform video autopublisher; it requires no hidden credentials or remote downloads, but it stores account state locally (cookies/credentials) in plaintext config files which is a privacy risk the user should weigh.
评估建议
This skill appears to do what it claims: browser-automated uploads using Playwright. Before installing/running it: 1) inspect config/accounts.json and config/publish_log.json after first run — they may contain usernames/passwords or cookies in plaintext; avoid storing sensitive accounts there or encrypt the files yourself; 2) run the tool in a controlled environment (separate account or VM) if you are worried about stored session data; 3) prefer official platform APIs for enterprise/high-securit...详细分析 ▾
✓ 用途与能力
The name/description (multi-platform video auto-publisher) match the provided Python script and SKILL.md. The script uses Playwright to automate web UIs for Douyin, WeChat Channels, Xiaohongshu, Bilibili and YouTube, which is the expected approach for an automation tool that does QR and browser-based login. There are no unrelated required env vars, binaries, or external services declared.
ℹ 指令范围
SKILL.md and README instruct installing Playwright and running the Python script (including headless mode). The runtime instructions and the script operate on the user's local files (video files) and create/modify local config files (config/accounts.json, config/publish_log.json). They do not appear to read or exfiltrate unrelated system files or environment variables. Note: the tool depends on the user scanning QR codes and will persist login state (cookies/config) locally — this expands the data the skill holds and should be considered sensitive.
✓ 安装机制
There is no automatic install spec in the registry (instruction-only skill). SKILL.md asks users to pip install playwright and to run 'playwright install chromium' — these are reasonable and expected for Playwright-based automation. No remote archives or obscure URLs are fetched by the skill itself.
ℹ 凭证需求
The skill requests no environment variables or external credentials from the registry metadata. However, it creates and stores account configuration locally (accounts.json) including fields for username/password and will persist cookies/session state locally. Those files are stored in plaintext by default and could contain sensitive tokens or cookies; this is proportionate to the tool's purpose but has privacy/security implications the user must accept.
✓ 持久化与权限
The skill is not always-enabled and does not request elevated or cross-skill privileges. It only creates/uses its own config files under a local 'config/' directory. It does not modify other skills or system-wide agent settings according to the provided files.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/3/1
Initial release of auto-publisher. - Automatically uploads videos to Douyin, WeChat Channels, Xiaohongshu, Bilibili, YouTube, and more. - Supports batch publishing, scheduled posting, auto-caption generation, and hashtag optimization. - One-click multi-platform publishing with support for login via QR code and secure credential management. - Includes detailed platform limits, setup instructions, and troubleshooting tips. - Scripts for publishing, with batch and scheduled publishing planned for future updates.
● 无害
安装命令 点击复制
官方npx clawhub@latest install auto-publisher
镜像加速npx clawhub@latest install auto-publisher --registry https://cn.clawhub-mirror.com
技能文档
🦞 小龙虾品牌
Created by 小龙虾 AI 工作室
"小龙虾，有大钳（前）途！"
Contact for custom services: +86 15805942886
Need custom automation workflows, enterprise batch publishing, or API integration? Reach out!
# Auto Publisher - 多平台视频发布助手
一键上传视频到抖音、视频号、小红书、B 站、YouTube 等平台。
Features
- ✅ 多平台支持 - 抖音、视频号、小红书、B 站、YouTube
- ✅ 一键发布 - 一次操作，多平台同步
- ✅ 自动文案 - 智能生成标题和标签
- ✅ 定时发布 - 支持发布队列和定时任务
- ✅ 发布记录 - 自动保存发布历史
- ✅ 二维码登录 - 安全便捷，无需密码
Quick Start
1. 安装依赖
pip install playwright
playwright install chromium
2. 配置账号
首次运行自动创建 config/accounts.json
3. 发布视频
# 发布到所有平台
python auto_publisher.py "video.mp4"# 指定平台
python auto_publisher.py "video.mp4" --platforms douyin,xiaohongshu
# 无头模式
python auto_publisher.py "video.mp4" --headless
Platform Support
| Platform | Login | Title Limit | Duration Limit |
|---|---|---|---|
| Douyin | QR Code | 100 chars | 15 min |
| WeChat Channels | QR Code | 1000 chars | 30 min |
| Xiaohongshu | QR Code | 20+1000 chars | 15 min |
| Bilibili | QR/Password | 80 chars | 4 hours |
| YouTube | 100 chars | 12 hours |
Scripts
scripts/auto_publisher.py- 主发布程序scripts/schedule_publisher.py- 定时发布（待开发）scripts/batch_publisher.py- 批量发布（待开发）
Config
config/accounts.json- 账号配置config/publish_log.json- 发布记录config/schedule.json- 发布计划（待开发）
Commands / Triggers
Use this skill when:
- "发布视频到所有平台"
- "Auto-post this video"
- "批量上传视频"
- "定时发布内容"
- "Multi-platform upload"
Security Notes
- Cookie 保存在本地，注意保密
- 定期更新登录状态
- 不要分享账号配置文件
- 企业用户建议使用官方 API
Troubleshooting
Login timeout
- Check network connection
- Manually visit the platform website
- Re-run and scan QR code again
Publish failed
- Check video format (MP4 recommended)
- Check video size limits
- View browser window for error details
Playwright errors
pip install --upgrade pip
pip install playwright
playwright install chromium
_Ready to automate your social media posting? Let's go! 🦞🚀_
数据来源：ClawHub ↗ · 中文优化：龙虾技能库
OpenClaw 技能定制 / 插件定制 / 私有工作流定制
免费技能或插件可能存在安全风险，如需更匹配、更安全的方案，建议联系付费定制