Skip to content
Back to skills

Infoq

ASecurity

Use direct HTTP with the user's InfoQ 写作社区 login cookies to inspect the account and save article drafts. Use for InfoQ 写作社区 article preparation; no paired browser is required for execution.

  • 17 stars
  • 0 votes
  • 0 copies
  • 0 views
  • Added November 11, 2026
ai-agentspythonbashgit

Works with

  • cli

Security analysis

A100/100

Pro scans all 4 files and shows the line behind each finding

Scanned November 11, 2026

npx -y skills add AceDataCloud/Skills --skill infoq --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Infoq?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Infoq
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/acedatacloud-infoq/badge)](https://www.skillsdirectory.com/skills/acedatacloud-infoq)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
---
name: infoq
description: Use direct HTTP with the user's InfoQ 写作社区 login cookies to inspect the account and save article drafts. Use for InfoQ 写作社区 article preparation; no paired browser is required for execution.
connections:
  - infoq
allowed_tools:
  - Bash
license: Apache-2.0
metadata:
  author: acedatacloud
  version: '2.0'
---

# InfoQ 写作社区 over HTTP

The connector injects `INFOQ_COOKIES` as a JSON cookie array. Never print it.
Use this bundled Python standard-library client. It talks directly to the platform's web endpoints; no local browser or browser fallback runs during execution. Login cookies are initially captured by the ACE extension and encrypted in the connection vault.

```bash
python3 "$SKILL_DIR/scripts/infoq.py" whoami
python3 "$SKILL_DIR/scripts/infoq.py" draft --title "标题" --content-file /tmp/article.txt
python3 "$SKILL_DIR/scripts/infoq.py" draft --title "标题" --content-file /tmp/article.txt --confirm
```

`SKILL_DIR` belongs to the most recently loaded skill. When switching back to this platform after loading another skill, load this skill again and immediately invoke its client through `SKILL_DIR`. Do not search shared cache directories for a script: they can contain older bundles.
Without trailing `--confirm`, writes only build a local preview: no cookies or network are accessed. Use `--confirm` only when the user's request authorizes that exact content, account and action. The script does not infer public-publication permission from a draft request.

## Platform contract

InfoQ requires author access (`is_author >= 2`). The script creates a draft ID and then writes the body with `pushFull`; failure preserves the original ID. The default `text` format is literal plain text. For formatted content, prepare a native ProseMirror document using [native content](references/native-content.md) and pass `--format native`; do not pass Markdown as plain text and claim it was rendered.

## Content and outcomes

- Preserve the complete article. The client does not re-host images or fetch external media. Use already hosted images and verify them in the editor; do not silently strip an image or change the content to make a request pass.
- The default input format is `text`. Plain text does not render Markdown. Native editor JSON must be prepared explicitly and checked against the source before submission.
- Account lookup must succeed before a write. A timeout, non-JSON/WAF page, missing result ID or business error stops the flow. Never retry a write through another route/browser automatically; inspect the original item first.
- Responses expose only selected account/result fields. Raw errors, CSRF tokens and cookies are never printed. HTTP 403 can mean WAF or account restrictions, not necessarily expiry. Reconnect at <https://studio.acedata.cloud/console/connectors> when login is invalid.
- A successful save response is **not** independent readback. Results include `readback_verified=false`; inspect/reopen the returned item before claiming the complete text persisted. No HTTP public publication is implemented.
- Do not call `publish_artifact` as delivered for a draft or private post.

## Protocol evidence

Request/response contracts inspected in [MediaSync](https://github.com/yjmm10/MediaSync/blob/77ec95860fd1b0898459a6f401220e34cf80f31e/packages/core/src/adapters/platforms/infoq.ts). The Python implementation is independent; no GPL source is bundled. Offline tests verify the wire contract and failure handling, not current live-account publishing access.

Files in this skill

  • SKILL.md3.5 KB
  • references/native-content.md828 B
  • scripts/infoq.py3.2 KB
  • scripts/publishing_http.py10.9 KB

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

View all in ai-agents →

Comments

Loading comments…

Newsletter

Get the weekly list of safe new skills, and the ones we pulled.