Atlas / Skills / comeonzhj / 添加本仓库为 marketplace

添加本仓库为 marketplaceBLOCK

skills/comeonzhj/xhs-note-creator

Agent skill by comeonzhj · Audited 2026-10-20

⚑ Report / re-scan Source ↗

一个自动撰写小红书笔记,自动生成图片,自动发布的 Skills

Verdict

BLOCK

Grade

Trust score

67 /100

Version

—

Hosts

2 documented

License

—

Stars

2,372

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

📕 Auto-Redbook-Skills(已重构版)

⚠️ 使用此工具前情确保已悉知官方 3 月 10 日发布的公告

公告地址:关于打击AI托管运营账号的治理公告

方式一:Claude Code Plugin 安装(推荐)

# 添加本仓库为 marketplace
/plugin marketplace add comeonzhj/Auto-Redbook-Skills

# 安装插件
/plugin install auto-redbook-skills@comeonzhj-Auto-Redbook-Skills

安装后运行 /reload-plugins 即可使用。

方式二:一句话安装

跟你的 Agent 说:

拉取下面的项目,安装其中的技能:https://github.com/comeonzhj/Auto-Redbook-Skills

方式三:手动安装

详见下方使用方式总览。

自动撰写小红书笔记、生成多主题卡片、可选自动发布的 Skills 当前版本对渲染脚本和样式系统做了一次完整重构,感谢 Cursor 的辅助开发 🙌

✨ 本次重构亮点

🎨 8 套主题皮肤:默认简约灰 + Playful Geometric / Neo-Brutalism / Botanical / Professional / Retro / Terminal / Sketch
📐 4 种分页模式:
separator:按 --- 分隔手动分页
auto-fit:固定尺寸,自动整体缩放内容,避免溢出/大面积留白
auto-split:根据渲染后高度自动拆分为多张卡片
dynamic:根据内容动态调整图片高度
🧱 统一卡片结构:外层浅灰背景(card-container)+ 内层主题背景(card-inner)+ 纯排版层(card-content)
🧠 封面与正文一体化:封面背景、标题渐变和正文卡片背景都按主题自动匹配

🖼 主题效果示例

所有示例均为 1080×1440px,小红书推荐 3:4 比例更多示例去 demo 中查看

Auto-fit 模式示例(自动缩放)

🚀 使用方式总览

1. 克隆项目

git clone https://github.com/comeonzhj/Auto-Redbook-Skills.git
cd Auto-Redbook-Skills

可以将本项目放到支持 Skills 的客户端目录,例如:

Claude:~/.claude/skills/
Alma:~/.config/Alma/skills/
TRAE:/your-path/.trae/skills/

2. 安装依赖

Python:

pip install -r requirements.txt
playwright install chromium

Node.js:

npm install
npx playwright install chromium

Node.js 18+ 同时用于图片渲染和内置的小红书 Creator 请求签名。

🎨 渲染图片(Python)

核心脚本:scripts/render_xhs.py

# 最简单用法(默认主题 + 手动分页)
python scripts/render_xhs.py demos/content.md

# 使用自动分页(推荐:内容长短难控)
python scripts/render_xhs.py demos/content.md -m auto-spli

Read from source at commit 695fde2a008bOBSERVED · 2026-10-20

Install

Commands as the repository documents them. They are shown, not run.

git clone https://github.com/comeonzhj/Auto-Redbook-Skills.git

pip install -r requirements.txt

npm install

Host compatibility

What the documentation claims. We have not run a compatibility test.

Host	Status	Notes
claude-code	mentioned
cursor	mentioned

What it tells the agent

The instruction file, verbatim from the audited commit — this is the text the model reads, and the surface the audit's instruction layer examines. Quoted here so you can judge it without cloning anything.

---
name: xhs-note-creator
description: 小红书笔记素材创作技能。当用户需要创建小红书笔记素材时使用这个技能。技能包含:根据用户的需求和提供的资料,撰写小红书笔记内容(标题+正文),生成图片卡片(封面+正文卡片),以及发布小红书笔记。支持 8 种精美排版主题和 4 种智能分页模式。
---

# 小红书笔记创作技能

根据用户提供的资料或需求,创作小红书笔记内容、生成精美图片卡片,并可选择发布到小红书。

> 详细参数文档见 `references/params.md`

---

## 工作流程

### 第一步:撰写小红书笔记内容

根据用户需求和资料,创作符合小红书风格的内容:

**标题**:不超过 20 字,吸引眼球,可用数字/疑问句/感叹号增强吸引力。

**正文**:段落清晰,点缀少量 Emoji(每段 1-2 个),短句短段,结尾附 5-10 个 SEO 标签。

---

### 第二步:生成渲染用 Markdown 文档

**注意:此 Markdown 专为图片渲染设计,禁止直接使用上一步的笔记正文。**

文档结构:

```markdown
---
emoji: "🚀"
title: "封面大标题(≤15字)"
subtitle: "封面副标题(≤15字)"
---

# 正文内容...

---

# 第二张卡片内容...(使用 --- 手动分隔时)
```

分页策略选择:
- 内容需精确切分 → 用 `---` 手动分隔,配合 `-m separator`
- 内容长短不稳定 → 生成普通 Markdown,使用 `-m auto-split`

---

### 第三步:渲染图片卡片

```bash
python scripts/render_xhs.py <markdown_file> [options]
```

**默认主题**:`sketch`(手绘素描风格)  
**默认分页**:`separator`(按 `---` 分隔)

常用示例:

```bash
# 默认(sketch 主题 + 手动分页)
python scripts/render_xhs.py content.md

# 自动分页(推荐内容长短不定时)
python scripts/render_xhs.py content.md -m auto-split

# 切换主题
python scripts/render_xhs.py content.md -t playful-geometric -m auto-split

# 固定尺寸自动缩放
python scripts/render_xhs.py content.md -m auto-fit
```

生成结果:`cover.png`(封面)+ `card_1.png`、`card_2.png`...(正文卡片)

**可用主题**(`-t`):`sketch`、`default`、`playful-geometric`、`neo-brutalism`、`botanical`、`professional`、`retro`、`terminal`

**分页模式**(`-m`):`separator`、`auto-fit`、`auto-split`、`dynamic`

> 完整参数说明见 `references/params.md`

---

### 第四步:发布小红书笔记(可选)

**前置条件**:安装 Python 与 Node.js 依赖,并配置 `.env` 中的
`XHS_CREATOR_COOKIE`。Cookie 必须来自已登录的
`https://creator.xiaohongshu.com`(详见 `references/params.md`)。

```bash
# 默认仅自己可见(推荐先预览确认)
python scripts/publish_xhs.py --title "笔记标题" --desc "笔记描述" \
  --images cover.png card_1.png card_2.png

# 确认无误后公开发布
python scripts/publish_xhs.py --title "笔记标题" --desc "笔记描述" \
  --images cover.png card_1.png card_2.png --public
```

> **默认以「仅自己可见」发布**,加 `--public` 参数才会公开。
> 发布链路已内置在当前技能中,不依赖外部 API 服务或其他项目目录。

---

## 技能资源

### 脚本
- `scripts/render_xhs.py` — 渲染脚本(主推,8 主题 + 4 分页模式)
- `scripts/render_xhs_v2.py` — 渲染脚本 V2(备用,7 种渐变色彩风格)
- `scripts/publish_xhs.py` — 发布脚本

### 模板与样式
- `assets/cover.html` — 封面 HTML 模板
- `assets/card.html` — 正文卡片 HTML 模板
- `assets/styles.css` — 公共容器样式
- `assets/themes/` — 各主题 CSS 文件

### 参考文档
- `references/params.md` — 完整参数参考(主题/模式/发布参数)

Trust audit

BLOCKgrade D · trust 67/100 Do not install this without reading the findings. The audit found something that could harm you or your machine.

Layer	What it checks	Result
L0	Provenance & inventory	WARN
L1	Static analysis of the code	FAIL
L2	Instruction surface (what it tells the agent)	PASS
L3	Class-specific surface	PASS
L4	Behavioural (sandbox)	SKIPPED

What the source does

Filesystem: UNDECLARED (2 observation(s))
Network: declared (2 observation(s))
Shell: declared (1 observation(s))
Dependencies: not all pinned
Secrets in source: none-found

Findings (21)

HIGHCode injection · code.deserialize · CWE-78, CWE-94, CWE-95

scripts/render_xhs_v2.js:95

metadata = yaml.load(yamlMatch[1]) || {};

Why it matters. deserialises untrusted bytes into live objects

Fix. use json or yaml.safe_load

MEDIUMInventory / provenance · inv.binary · CWE-1104

demos/.DS_Store

.DS_Store

Why it matters. a compiled or binary member cannot be reviewed from source

Fix. ship source, or explain the binary in the README

MEDIUMInventory / provenance · inv.symlink · CWE-1104

skills/xhs-note-creator/SKILL.md

skills/xhs-note-creator/SKILL.md

Why it matters. link not followed

MEDIUMFilesystem / path · fs.destructive · CWE-22, CWE-59

vendor/xhs_publish_runtime/apis/xhs_creator_apis.py:684

os.remove(temp_path)

MEDIUMFilesystem / path · fs.destructive · CWE-22, CWE-59

vendor/xhs_publish_runtime/xhs_utils/xhs_creator/runtime.py:132

os.remove(temp_path)

MEDIUMNetwork egress · net.raw_ip · CWE-200, CWE-319

scripts/publish_xhs.py:197

parser.add_argument("--proxy", help="HTTP/HTTPS 代理,例如 http://127.0.0.1:7890")

MEDIUMObfuscation / stealth · obf.base64_blob · CWE-506, CWE-94

vendor/xhs_publish_runtime/xhs_utils/xhs_core/js/mns_keystreams.json:1

{"len":2048,"b64":"caMCJXeTJx3dJzvO4+S5jZ15NeHaM/V2Xi6or7bcd6UaSZ0jtnwgZgAlhgy/E9RUDZJJf1hobFdOUI9G4ZVjRPOROb9PryKj7vEgt5JYFFsv61GTtkeGaZYSmOeb7cpkbhppOpJhVKWnob0c8N7bdC+RenR6HjiLI08id1FttxFgNUOXMPph6

LOWInventory / provenance · inv.hidden_file · CWE-1104

demos/.DS_Store

.DS_Store

Why it matters. hidden member outside the usual dotfiles

Fix. review its purpose

LOWInventory / provenance · inv.no_license · CWE-1104

Why it matters. no LICENSE file and no repo licence

Fix. add a licence