Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add Morningstar202604/awesome-skillkit --skill toutiao-publishergit clone --depth 1 https://github.com/Morningstar202604/awesome-skillkitWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/morningstar202604/awesome-skillkit/toutiao-publisher)<a href="https://agentmods.dev/skills/morningstar202604/awesome-skillkit/toutiao-publisher"><img src="https://agentmods.dev/badge/skills/morningstar202604/awesome-skillkit/toutiao-publisher/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/morningstar202604/awesome-skillkit/toutiao-publisher"><img src="https://agentmods.dev/badge/skills/morningstar202604/awesome-skillkit/toutiao-publisher.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00024 | $0.00725 |
| Opus 5 | $0.00012 | $0.00362 |
| Sonnet 5 | $0.00005 | $0.00145 |
| Haiku 4.5 | $0.00002 | $0.00072 |
Grade A, and why
toutiao-publisher scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 12d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
今日头条/抖音 Publisher
今日头条/抖音发布客户端，支持两种模式：
- 官方开放平台 API —— 文章发布，需申请 AppKey
- Web 内部 API —— 微头条发布，仅需 Cookie
功能
article-publish—— 文章发布（官方 API）micro-post—— 微头条发布（Web 内部 API）
安全设计
- 默认 dry-run：所有写操作默认只打印请求计划，不联网；加
--execute才真正发送。 - 凭据隔离：
- 官方 API：
TOUTIAO_ACCESS_TOKEN或TOUTIAO_APPID/TOUTIAO_APPSECRET - Web API：
TOUTIAO_COOKIE环境变量或--cookie-file
- 官方 API：
使用示例
# 文章发布（官方 API）
export TOUTIAO_ACCESS_TOKEN="your_token"
python toutiao_publisher.py article-publish --execute \
--title "我的文章" \
--content "# 标题\n正文内容..." \
--cover-images "https://example.com/cover.png" \
--tags "Python,AI"
# 微头条发布（Web Cookie）
export TOUTIAO_COOKIE="your_cookie"
python toutiao_publisher.py micro-post --execute \
--content "发个微头条 #话题#" \
--images "https://example.com/img1.png"
端点核对（首次使用必做）
Web 内部 API 无官方文档，端点可能随时变更。首次使用前请在浏览器 DevTools 核对。
当前端点（需核对）：
- 文章发布:
POST https://open.toutiao.com/api/articles/publish - 微头条:
POST https://www.toutiao.com/api/microblog/create
认证
官方 API：TOUTIAO_ACCESS_TOKEN 或 TOUTIAO_APPID/TOUTIAO_APPSECRET
Web 内部 API：TOUTIAO_COOKIE 或 --cookie-file
export TOUTIAO_COOKIE="tt_webid=xxx; s_v_web_id=xxx; ..."
退出码
0成功1API 错误或参数错误
依赖
- Python 3.8+
- 标准库
publish_common
相关技能
bilibili-publisher— B 站发布baijiahao-publisher— 百家号发布weibo-publisher— 微博发布cross-post-orchestrator— 多平台编排
What ships with it
2 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 12d ago First seen · 84 lines · 24 tokens per session scan A 1d41ae2e18eb
toutiao-publisher is a skill published in the GitHub repository Morningstar202604/awesome-skillkit (1 stars, last pushed 2d ago), licensed Apache-2.0. It adds 24 tokens to every session and 725 once invoked, about $0.0001 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
feishu-websocket-stability
Stabilize Hermes Feishu websocket mode when reconnects are too slow, ping timing needs tuning, or multiple local gateways accidentally compete for the same Feishu appid. Use when Feishu websocket reconnect delays feel excessive, runtime websocket overrides appear ignored by the SDK, startup should fail fast on…
hermes-agent-litellm-vertex-gateway
Configure an existing Hermes Agent deployment to use a local LiteLLM Vertex Proxy as an additional model option, without disturbing the current Hermes configuration. Use when you need Hermes to access Gemini models via a local LiteLLM gateway already running at 127.0.0.1:4000.
prior-authorization-decision-automation
Generate deterministic code and pipeline recipes for automating prior authorization (PA) workflows: parsing X12 278 and FHIR PAS requests, extracting clinical features, rules-based adjudication, training machine learning classifiers, and analyzing denial patterns. Use when asked to 'parse a prior authorization…
api-learner
Workflow for learning site APIs via traffic capture and replacing browser automation with direct curl calls.
notion
Notion API via curl: pages, databases, blocks, search.
ably-automation
Automate Ably tasks via Rube MCP (Composio). Always search tools first for current schemas.