Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add Morningstar202604/awesome-skillkit --skill cnblogs-skillgit clone --depth 1 https://github.com/Morningstar202604/awesome-skillkitWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/morningstar202604/awesome-skillkit/cnblogs-skill)<a href="https://agentmods.dev/skills/morningstar202604/awesome-skillkit/cnblogs-skill"><img src="https://agentmods.dev/badge/skills/morningstar202604/awesome-skillkit/cnblogs-skill/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/morningstar202604/awesome-skillkit/cnblogs-skill"><img src="https://agentmods.dev/badge/skills/morningstar202604/awesome-skillkit/cnblogs-skill.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00151 | $0.03210 |
| Opus 5 | $0.00076 | $0.01605 |
| Sonnet 5 | $0.00030 | $0.00642 |
| Haiku 4.5 | $0.00015 | $0.00321 |
Grade A, and why
cnblogs-skill scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 11d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
curl -s "https://i.cnblogs.com/api/posts/{任意已有postId}" -H "Cookie: $COOKIE" | head -c 20 How it starts
The opening of the file, as written. The whole thing — 264 lines — stays where its author put it; the contents beside it link to each section on GitHub.
博客园自动化发文与管理技能
概述
本技能是博客园(cnblogs.com)的全自动化操作技能，定位为自动化发文 + 自动化管理博客园。
采用 API优先、浏览器兜底 的双轨策略：
- API方式（推荐）：通过
i.cnblogs.com/api/posts等 REST 接口直接操作，无需浏览器交互 - 浏览器方式（兜底）：通过任意 Playwright 驱动的浏览器会话操作页面，用于评论提交、博问互动等无 API 的场景
账号信息
账号数据不随本技能分发，存于 references/account.local.json（gitignored）：
| 字段 | 说明 |
|---|---|
username |
博客园用户名 |
blog_url |
博客首页地址 |
blog_id |
博客 ID（API 发文必需） |
signature_id |
签名 ID |
personal_categories |
个人分类 ID 映射 |
published_posts |
已发布文章台账（本地运营记录） |
首次使用：复制 references/account.example.json 为 account.local.json 并填入你自己的账号。所有发文/互动流程先读该文件；文件缺失时提示用户配置，不要猜测账号。
已发布文章列表
→ 运营台账已移至 references/account.local.json 的 published_posts 字段（含 PostId、标题、分类），发文成功后由流程负责追加更新。
认证管理
Cookie 来源
Cookie 存储在会话工作目录的 auth-state.json 文件中。该文件包含浏览器完整 cookie（含 HttpOnly），由 Playwright 登录会话的 storage_state 导出。
提取方式见 references/publish-api.md 的"Cookie 提取"章节。
XSRF Token
POST 请求需要 X-XSRF-TOKEN header。获取方式：
- GET 请求
https://i.cnblogs.com/posts（HTML 页面） - 从响应的
Set-Cookie头中提取XSRF-TOKEN值 decodeURIComponent解码后使用
重要：XSRF token 会定期变化，每次 POST 前重新获取最安全。
登录态验证
# GET 请求任意 API 端点，返回 JSON = 有效，返回 HTML = 过期
curl -s "https://i.cnblogs.com/api/posts/{任意已有postId}" -H "Cookie: $COOKIE" | head -c 20
# JSON 开头 = 有效；<!doctype = 过期
过期后需提示用户通过浏览器重新登录。
核心工作流
任务路由
根据用户需求选择对应工作流，先读参考文件再操作：
| 用户意图 | 工作流 | 参考文件 |
|---|---|---|
| 选题/找热门话题 | 热点调研 | references/topic-research.md |
| 写文章/发文/发布博文 | API发文流程 | references/publish-api.md |
| 检查文章格式 | 格式检查 | references/formatting-guide.md |
| 生成配图/上传图片 | 配图流程 | references/image-guide.md |
| 评论/回复评论/社区活跃 | 社区互动 | references/community.md |
| 查看消息/有没有人回复 | 社区互动 | references/community.md |
| 遇到操作失败/超时 | 故障排查 | references/troubleshooting.md |
发文完整流程（API方式）
- 热点调研 → 浏览博客园首页 + websearch 搜索最新话题和数据
- 分析优秀文章 → 看高阅读量文章的标题技巧、结构、引流方式
- 确定选题 → 选择有差异化角度的话题
- 搜索素材 → 用 websearch 获取最新数据、案例、趋势
- 撰写文章 → 按排版规范和发文风格写 Markdown 正文
- 格式检查 → 运行
scripts/cnblogs-pre-publish-check.py - 生成配图 → 用任意可用的文生图工具/技能生成 2 张配图（无配图能力可跳过）
- 上传配图 → Python urllib 直接 POST 到博客园图床
- 插入图片 → 将图片 URL 插入 Markdown 正文
- 提取 Cookie + XSRF → 从
auth-state.json提取，GET HTML 页面获取新 XSRF - POST 创建文章 →
https://i.cnblogs.com/api/posts，publishAt必须为null - 验证 → GET 文章确认字段完整、图片到位、格式检查全 PASS
What ships with it
9 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
- references/account.example.json 404 B
- references/community.md 8.5 KB
- references/formatting-guide.md 5.8 KB
- references/image-guide.md 7.7 KB
- references/publish-api.md 14 KB
- references/topic-research.md 4.3 KB
- references/troubleshooting.md 9.2 KB
- scripts/cnblogs-pre-publish-check.py 7.1 KB runs code
- tests/test_pre_publish_check.py 1.8 KB runs code
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 11d ago First seen · 264 lines · 151 tokens per session scan A ca5680db45b5
cnblogs-skill is a skill published in the GitHub repository Morningstar202604/awesome-skillkit (1 stars, last pushed 2d ago), licensed Apache-2.0. It adds 151 tokens to every session and 3,210 once invoked, about $0.0008 per session on Opus 5. A static security scan graded it A with 1 finding (makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
agentic-webdesign-html-anything
Install and use html-anything — the agentic HTML editor where your local AI agent writes HTML and you ship it. 75 skills × 9 surfaces, BYOK, zero API key. Use when building magazine articles, keynote decks, resumes, posters, social cards, web prototypes, data reports, or Hyperframes videos with AI coding agents.
blog-post
Full-stack blog post production — turns a topic, idea, or brief into a complete publishing package across written, social, and multimedia surfaces. Generates broomva.tech .mdx posts (or Substack/other long-form), X posts and threads, LinkedIn posts, Instagram posts and reel scripts, plus multimedia asset plans…
content-creation
Full-stack content creation pipeline: idea or reference to published blog post, audio narration, video, and social media distribution. Orchestrates research, reference extraction, storytelling, AI visual assets (Nano Banana, Veo 3.1), TTS audio (Voicebox, kokoro-tts, Edge TTS), Remotion video, and social copy into a…
revenuecast
/revenuecast is the verb that turns what you can do into a machine that makes the world want it. You have a real capability — a craft, an expertise, a running system. revenuecast builds the loop where the capability's output becomes its own advertisement, and the demand that output creates is monetized by selling the…
citable
Make authored content survive the two selection surfaces it now faces: human engagement and LLM retrieval for citation. These partially anti-correlate, and the tactics that raise reactions are in two measured cases the ones that suppress citation. Encodes effect sizes from published causal studies (Scrunch, 12,000…
claude-md-improver
Audit and improve CLAUDE.md files in repositories. Use when user asks to check, audit, update, improve, or fix CLAUDE.md files. Scans for all CLAUDE.md files, evaluates quality against templates, outputs quality report, then makes targeted updates. Also use when the user mentions "CLAUDE.md maintenance" or "project…