by 安全扫描
OpenClaw
安全
high confidenceNULL
评估建议
This skill appears to do what it claims: parse user text/Markdown, download optional images, and use a browser automation tool to create drafts on mp.toutiao.com. Before installing or running it, ensure you: (1) are comfortable that the agent/browser session used is logged into the correct Toutiao account (automated posting uses that session), (2) only include image URLs you trust (the skill downloads them to /tmp), and (3) test with a small number of non-sensitive drafts to confirm selectors an...详细分析 ▾
✓ 用途与能力
Name/description (upload drafts to Toutiao) match the instructions: controlling a browser to fill the editor, upload images, and save drafts on mp.toutiao.com. Required artifacts (image URLs, temporary local files, browser control) are expected for this task.
ℹ 指令范围
Instructions are scoped to parsing user-provided markdown, downloading optional image URLs, manipulating the Toutiao editor via a browser tool, and saving drafts. Note: the skill explicitly downloads external image URLs to /tmp/openclaw/uploads/ and uses the user's logged-in browser session — these are expected for uploading but have privacy implications (you should trust the image sources and the account used). The instructions do not ask for unrelated files, system credentials, or external endpoints beyond the image hosts and Toutiao.
✓ 安装机制
No install spec or code files are present (instruction-only). Nothing is downloaded or written to disk by an installer, lowering installation risk.
✓ 凭证需求
The skill declares no environment variables, credentials, or config paths. The only runtime requirement is that the user be logged into the Toutiao creator platform in the browser used by the agent — this is proportional to the stated purpose.
✓ 持久化与权限
always is false and the skill does not request persistent/system-wide changes or access to other skills' configurations. It operates per invocation via browser automation and temporary file storage.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/3/18
NULL
● 无害
安装命令
点击复制官方npx clawhub@latest install toutiaodraft
镜像加速npx clawhub@latest install toutiaodraft --registry https://cn.longxiaskill.com镜像同步中