toutiao-publisher

Warn

Audited by Runlayer on Feb 22, 2026

Risk Level: MEDIUM
Scan Summary
Max Score
78%
Files
10
Flagged
10
Chunks
12
Flagged Files (10)
README.mdHIGH
78.3%

Malicious tool definition detected

Tool: README.md Description: # Toutiao Publisher Skill 架构与最佳实践指南 ## 1.

SKILL.mdHIGH
78.3%

Malicious tool definition detected

Tool: SKILL.md Description: --- name: toutiao-publisher description: Publish articles to Toutiao (Today's Headlines).

requirements.txtHIGH
78.3%

Malicious tool definition detected

Description: patchright==1.55.2 python-dotenv==1.0.0

scripts/auth_manager.pyHIGH
78.3%

Malicious tool definition detected

Tool: scripts/auth_manager.py [1/2] Description: #!/usr/bin/env python3 """ Authentication Manager for Toutiao Publisher Handles Toutiao login and browser state persistence """ import json import time import argparse import shutil import re import sys from pathlib import Path from typing import Optional, Dict, Any from patchright.sync_api import sync_playwright, BrowserContext # Add parent directory to path sys.path.insert(0, str(Path(__file__).parent)) from config import ( BROWSER_STATE_DIR, ST

scripts/browser_utils.pyHIGH
78.3%

Malicious tool definition detected

Tool: scripts/browser_utils.py Description: """ Browser Utilities for Toutiao Publisher Skill Handles browser launching, stealth features, and common interactions """ import json import time import random from typing import Optional, List from patchright.sync_api import Playwright, BrowserContext, Page from config import BROWSER_PROFILE_DIR, STATE_FILE, BROWSER_ARGS, USER_AGENT class BrowserFactory: """Factory for creating configured browser contexts""" @staticmethod def launch_persistent_contex

scripts/config.pyHIGH
78.3%

Malicious tool definition detected

Tool: scripts/config.py Description: """ Configuration for Toutiao Publisher Skill Centralizes constants, selectors, and paths """ from pathlib import Path # Paths SKILL_DIR = Path(__file__).parent.parent DATA_DIR = SKILL_DIR / "data" BROWSER_STATE_DIR = DATA_DIR / "browser_state" BROWSER_PROFILE_DIR = BROWSER_STATE_DIR / "browser_profile" STATE_FILE = BROWSER_STATE_DIR / "state.json" AUTH_INFO_FILE = DATA_DIR / "auth_info.json" # URLs LOGIN_URL = "https://mp.toutiao.com/auth/page/login"

scripts/md2html.pyHIGH
78.3%

Malicious tool definition detected

Tool: scripts/md2html.py Description: import re def convert(text): """ Simple Markdown to HTML converter for Toutiao.

scripts/publisher.pyHIGH
78.3%

Malicious tool definition detected

Tool: scripts/publisher.py [1/2] Description: #!/usr/bin/env python3 """ Publisher script for Toutiao Navigates to the publish page with authenticated session.

Tool: scripts/publisher.py [2/2] Description: cover_image_path: print(f"🖼️ Uploading cover image: {cover_image_path}...") try: # check if file exists if not os.path.exists(cover_image_path): print(f" ❌ Cover image not found at: {cover_image_path}") else: # 3.1 Click "Add Cover" area print(" Clicking 'Add Cover' area...") add_cover_btn = page.locator("div.article-cover-add").first if add_cover_btn.is_visible(): add_cover_btn.click() else: # Try finding by text if class selector fails page.locator

scripts/run.pyHIGH
78.3%

Malicious tool definition detected

Tool: scripts/run.py Description: #!/usr/bin/env python3 """ Universal runner for Toutiao Publisher skill scripts Ensures all scripts run with the correct virtual environment """ import os import sys import subprocess from pathlib import Path def get_venv_python(): """Get the virtual environment Python executable""" skill_dir = Path(__file__).parent.parent venv_dir = skill_dir / ".venv" if os.name == "nt": # Windows venv_python = venv_dir / "Scripts" / "python.exe" else: # Unix/Linux/Mac venv_

scripts/setup_environment.pyHIGH
78.3%

Malicious tool definition detected

Tool: scripts/setup_environment.py Description: #!/usr/bin/env python3 """ Environment Setup for Toutiao Publisher Skill Manages virtual environment and dependencies automatically """ import os import sys import subprocess import venv from pathlib import Path class SkillEnvironment: """Manages skill-specific virtual environment""" def __init__(self): # Skill directory paths self.skill_dir = Path(__file__).parent.parent self.venv_dir = self.skill_dir / ".venv" self.requirements_file = self.skill_

Audit Metadata
Max File Score
78%
Classification
UNKNOWN_SERVER
Files Scanned
10
Files Flagged
10
Chunks Analyzed
12
Analyzed
Feb 22, 2026, 07:39 AM
Security Audit — runlayer — toutiao-publisher