Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add guanyang/super-publisher --skill toutiao-publishergit clone --depth 1 https://github.com/guanyang/super-publisherWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/guanyang/super-publisher/toutiao-publisher)<a href="https://agentmods.dev/skills/guanyang/super-publisher/toutiao-publisher"><img src="https://agentmods.dev/badge/skills/guanyang/super-publisher/toutiao-publisher/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/guanyang/super-publisher/toutiao-publisher"><img src="https://agentmods.dev/badge/skills/guanyang/super-publisher/toutiao-publisher.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- Socket pass
- Snyk warn
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00073 | $0.01012 |
| Opus 5 | $0.00036 | $0.00506 |
| Sonnet 5 | $0.00015 | $0.00202 |
| Haiku 4.5 | $0.00007 | $0.00101 |
Grade A, and why
toutiao-publisher scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 13d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 121 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Toutiao Publisher
Use the scripts from this Skill directory. Resolve the directory containing this
SKILL.md first and set its absolute path as SKILL_DIR; do not assume the caller's
working directory is the Skill directory.
Safety rules
- Default to
--mode manual. Leave Chrome open for the user to review and click Publish. - Use
--mode autoonly when the user explicitly authorizes final publishing. - Run
clear --yesorreauth --yesonly after the user confirms that all local Agents may lose the shared Toutiao session. - Do not bypass input validation or treat an unconfirmed publish click as success.
Preflight authentication
Check the protected Toutiao page before asking the user to scan a QR code:
python3 "$SKILL_DIR/scripts/run.py" auth_manager.py status --verify --json
If the result status is not_authenticated, open the interactive login flow:
python3 "$SKILL_DIR/scripts/run.py" auth_manager.py setup --json
The shared profile lives under ~/.super-publisher/toutiao-publisher/ by default.
Codex, Kiro, Antigravity, and direct CLI runs by the same system user reuse it.
Set SUPER_PUBLISHER_DATA_DIR to override the location; relative values resolve
from the user home directory.
Prepare and publish an article
Validate inputs without opening Chrome:
python3 "$SKILL_DIR/scripts/run.py" publisher.py \
--mode validate \
--title "AI Trends 2026" \
--content-file "/absolute/path/article.md" \
--cover "/absolute/path/cover.jpg" \
--json
After validation succeeds, fill the draft and wait for manual review:
python3 "$SKILL_DIR/scripts/run.py" publisher.py \
--mode manual \
--title "AI Trends 2026" \
--content-file "/absolute/path/article.md" \
--cover "/absolute/path/cover.jpg" \
--json
Use direct text only through --content-text. --content remains an alias for
--content-file; a missing path is an error rather than literal article text.
Markdown supports headings, links, ordered and unordered lists, block quotes,
tables, fenced code, inline code, emphasis, and local inline images. Resolve relative
image paths from the Markdown file. If the body contains images, skip explicit cover
upload. Use --no-cover only when the body has no image and no cover is supplied.
What ships with it
19 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
- README.md 7.8 KB
- requirements.txt 56 B
- scripts/auth_manager.py 20 KB runs code
- scripts/browser_utils.py 3.5 KB runs code
- scripts/cli_utils.py 788 B runs code
- scripts/config.py 1.4 KB runs code
- scripts/md2html.py 2.6 KB runs code
- scripts/publisher.py 44 KB runs code
- scripts/run.py 5.4 KB runs code
- scripts/setup_environment.py 7.6 KB runs code
- tests/test_auth_manager.py 8.5 KB runs code
- tests/test_browser_utils.py 1.2 KB runs code
- tests/test_config.py 1.3 KB runs code
- tests/test_md2html.py 2.2 KB runs code
- tests/test_publisher_cli.py 4.9 KB runs code
- tests/test_publisher_cover_policy.py 787 B runs code
- tests/test_publisher_debug.py 1.5 KB runs code
- tests/test_run.py 4.8 KB runs code
- tests/test_setup_environment.py 2.6 KB runs code
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 13d ago First seen · 121 lines · 73 tokens per session scan A 3d2618ef38bc
toutiao-publisher is a skill published in the GitHub repository guanyang/super-publisher (30 stars, last pushed 1mo ago), licensed MIT. It adds 73 tokens to every session and 1,012 once invoked, about $0.0004 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
agent-coverage-check
Check agent configuration coverage across hierarchy levels and phases. Use to ensure complete agent system coverage.
skillpack-creator
Create a reusable SkillPack from a successful completed task. Use when the user wants to convert a one-off research, coding, analysis, or content workflow into a distributable local SkillPack with skillpack.json, local skills under skills/, starter prompts, start scripts, and an optional zip package.
skill-creator
Create new skills, modify and improve existing skills, and measure skill performance. Use when users want to create a skill from scratch, edit, or optimize an existing skill, run evals to test a skill, benchmark skill performance with variance analysis, or optimize a skill's description for better triggering accuracy.
Comprehensive PDF manipulation toolkit for extracting text and tables, creating new PDFs, merging/splitting documents, and handling forms. When GLM needs to fill in a PDF form or programmatically process, generate, or analyze PDF documents at scale.
frontend-design
Transform UI style requirements into production-ready frontend code with systematic design tokens, accessibility compliance, and creative execution. Use when building websites, web applications, React/Vue components, dashboards, landing pages, or any web UI requiring both design consistency and aesthetic quality.
Video Generation
Implement AI-powered video generation capabilities using the z-ai-web-dev-sdk. Use this skill when the user needs to generate videos from text prompts or images, create video content programmatically, or build applications that produce video outputs. Supports asynchronous task management with status polling and result…