技能详情（站内镜像，无评论）
许可证：MIT-0
MIT-0 ·免费使用、修改和重新分发。无需归因。
版本：v1.0.0
统计：⭐ 0 · 140 · 0 current installs · 0 all-time installs
⭐ 0
安装量（当前） 0
🛡 VirusTotal ：可疑 · OpenClaw ：可疑
Package：18923236683/xhs-auto-content-by-hot
安全扫描（ClawHub）
- VirusTotal ：可疑
- OpenClaw ：可疑
OpenClaw 评估
The skill mostly does what it says (fetch Baidu hot topics, generate copy, call Seedream to make images), but it asks users to place a sensitive API key directly into the script and the SKILL.md contains detected unicode control characters (possible prompt-injection), which is risky and inconsistent with best practices.
目的
The code and instructions match the stated purpose: fetching Baidu hot topics, generating Xiaohongshu copy, and calling a Seedream (火山引擎) image-generation endpoint. However, the SKILL.md does not declare the API key requirement as an environment variable or credential even though the script requires an API_KEY; instead it instructs the user to write the key into scripts/generate.py. That mismatch and the recommendation to embed a secret in source is disproportionate and unusual.
说明范围
SKILL.md directs the agent/user to ask for the ByteDance/Seedream API key and store it inside generate.py. That expands scope to collecting and persisting a sensitive secret into code. The script performs network requests (to Baidu and the Volcengine endpoint) and writes files into /root/.openclaw/workspace by default; these actions are coherent with the feature but the instructions enable secret persistence in code and assume write access to …
安装机制
No install spec (instruction-only + included script). Nothing is downloaded at install time and no external archive or unknown URLs are used by the installer. Execution requires Python and the requests library (not declared), which is a modest expectation.
证书
The skill requires a Seedream/ByteDance API key to function, but this is not declared in requires.env or primary credential fields; instead the SKILL.md instructs the user to paste the API key into the script. Asking to store a secret in source is disproportionate and dangerous. The script otherwise requests network access to Baidu and the Volcengine API only (no unrelated cloud creds), so the scope of credentials is small but handled insecurely.
持久
always:false and user-invocable:true (defaults) — no elevated persistent privilege requested. The skill writes output files to a workspace directory (default /root/.openclaw/workspace) and stores generated artifacts, which is expected behavior for a content generation tool and does not modify other skills or system-wide settings.
安装（复制给龙虾 AI）
将下方整段复制到龙虾中文库对话中，由龙虾按 SKILL.md 完成安装。
请把本段交给龙虾中文库（龙虾 AI）执行：为本机安装 OpenClaw 技能「xhs-auto-content-by-hot」。简介：自动获取百度热搜话题，生成小红书文案并调用Seedream-4.5生成封面及配图，输出完整内容包。。
请 fetch 以下地址读取 SKILL.md 并按文档完成安装：https://raw.githubusercontent.com/openclaw/skills/refs/heads/main/skills/18923236683/xhs-auto-content-by-hot/SKILL.md
（来源：yingzhi8.cn 技能库）SKILL.md
---
name: XHS-AutoContentByHot
version: 1.0.0
description: 全自动生成小红书内容：获取百度热门话题 → 生成文案 → Seedream-4.5生图 → 输出图片+文案
author: Matianle
---
# 小红书内容生成 Skill
全自动4步流程，一键生成完整小红书内容！
## 功能
1. 获取百度热搜TOP10，随机选择一个话题
2. 根据话题生成小红书文案（标题15字以内 + 正文50-200字）
3. 调用火山引擎Seedream-4.5生成3张配图（第1张为封面图）
4. 输出所有图片 + 完整文案
## 使用方法
## 配置
- 先询问使用者的字节跳动生图模型的 API Key 是什么，得到回复后，把它存入 generate.py 的 API_KEY 里面备用
- 如果没有 API Key 或者 API Key 错误，则提示“生图失败，没有正确的 API Key，无法调用生图模型”
### 基础用法（自动从百度热搜选择话题）
```bash
python3 {baseDir}/scripts/generate.py
```
### 高级用法（自定义话题）
```bash
python3 {baseDir}/scripts/generate.py --topic "你的自定义话题"
```
### 更多选项
```bash
python3 {baseDir}/scripts/generate.py --topic "自定义话题" --images 5 --output-dir ./output
```
## 参数说明
- `--topic`: (可选) 自定义话题，不指定则从百度热搜 TOP1-10 随机选择
- `--images`: (可选) 生成图片数量，默认 3 张
- `--output-dir`: (可选) 输出目录，默认 `/root/.openclaw/workspace`
## 输出
- 图片：`xhs_final_1.png`、`xhs_final_2.png`、`xhs_final_3.png`
- 文案：`xhs_content.json`
- 话题：`selected_topic.txt`
- 图片列表：`generated_images.json`
## 注意事项
- 第1张图片提示词会自动添加"用来发布小红书的封面配图，要有网感与设计感"
- 第2、3张图片不添加封面关键词，提示词完全不同
- 所有图片尺寸为 2048x2048