socialdatax-skills 0.2.11 → 0.2.12

package/README.md

@@ -2,7 +2,7 @@
 
 This public package provides the unified skill installer and direct CLI helper for SocialDataX services.
 
-The current public tools support 小红书 / Xiaohongshu / XHS / RedNote, 抖音 / Douyin, 快手 / Kuaishou / Kwai, 微博 / Weibo, and 视频号 / WeChat Channels content research and analysis workflows. The public skill layer is intentionally named by media capability so supported platforms can evolve without changing the installation model.
+The current public tools support 小红书 / Xiaohongshu / XHS / RedNote, 抖音 / Douyin, 快手 / Kuaishou / Kwai, 微博 / Weibo, and 视频号 / WeChat Channels content research and analysis workflows, plus SocialDataX 敏感检测 text checks. The public skill layer is intentionally named by capability so supported services can evolve without changing the installation model.
 
 - direct `npx` JSON commands for agents that can run shell commands
 - AgentSkills-compatible installers split by capability for OpenClaw, Hermes Agent, Codex, Claude Code, and general agent skill directories
@@ -39,6 +39,10 @@ Common search phrases for this skill package:
 - `视频号 skills`
 - `SocialDataX content research`
 - `content research assistant`
+- `敏感检测 SocialDataX`
+- `sensitive check skill`
+- `content safety skill`
+- `text safety check`
 
 ## Platform MCPs
 
@@ -47,6 +51,7 @@ Common search phrases for this skill package:
 - Kuaishou hosted MCP endpoint: `https://mcp.52choujiang.com/kuaishou/mcp`
 - Weibo hosted MCP endpoint: `https://mcp.52choujiang.com/weibo/mcp`
 - WeChat Channels hosted MCP endpoint: `https://mcp.52choujiang.com/wechat/mcp`
+- Sensitive Check hosted MCP endpoint: `https://mcp.52choujiang.com/sensitive-check/mcp`
 - Hosted transport: `streamable-http`
 - Authentication: `Authorization: Bearer <SOCIALDATAX_API_KEY>`
 - Website: <https://socialdatax.com>
@@ -60,8 +65,10 @@ Common search phrases for this skill package:
 - Weibo future platform MCP registry name: `com.socialdatax/weibo-insights`
 - WeChat Channels current platform MCP registry name: `com.52choujiang/wechat-channels-insights`
 - WeChat Channels future platform MCP registry name: `com.socialdatax/wechat-channels-insights`
+- Sensitive Check MCP server name: `sensitive-check`
+- Sensitive Check future MCP registry name: `com.socialdatax/sensitive-check`
 - Unified MCP registry name: none; this package installs skills and calls explicit platform services.
-- Current public capability version: `0.2.11`
+- Current public capability version: `0.2.12`
 
 ## Direct CLI
 
@@ -127,9 +134,10 @@ npx -y socialdatax-skills@latest wechat replies --object-id "<object_id>" --obje
 npx -y socialdatax-skills@latest wechat user-info --user-id "<finder_user_id>" --pretty
 npx -y socialdatax-skills@latest wechat user-posts --user-id "<finder_user_id>" --pretty
 npx -y socialdatax-skills@latest wechat user-posts --url "<wechat_video_url_or_share_text>" --pretty
+npx -y socialdatax-skills@latest sensitive-check text --text "<content>" --platform xhs --pretty
 ```
 
-The direct CLI prints a JSON envelope with `platform`, `tool`, `arguments`, and `data`.
+Most direct CLI commands print a JSON envelope with `platform`, `tool`, `arguments`, and `data`. `sensitive-check` prints `platform`, `tool`, and `data` only; it does not echo the original text in CLI output.
 
 For XHS outputs with a returned `note_url` field, when `note_url` is non-null, preserve it exactly as the full URL, including `xsec_token` query parameters, such as in final answers or display. Do not modify, truncate, redact, normalize, rebuild, or replace it with a link assembled from `note_id`. If `note_url` is null, do not synthesize a public link from `note_id`.
 
@@ -192,6 +200,7 @@ SOCIALDATAX_API_KEY="<SOCIALDATAX_API_KEY>" node cli.mjs douyin search --keyword
 SOCIALDATAX_API_KEY="<SOCIALDATAX_API_KEY>" node cli.mjs kuaishou search --keyword "露营" --pretty
 SOCIALDATAX_API_KEY="<SOCIALDATAX_API_KEY>" node cli.mjs weibo search --keyword "露营" --pretty
 SOCIALDATAX_API_KEY="<SOCIALDATAX_API_KEY>" node cli.mjs wechat search --keyword "露营" --pretty
+SOCIALDATAX_API_KEY="<SOCIALDATAX_API_KEY>" node cli.mjs sensitive-check text --text "<content>" --platform xhs --pretty
 ```
 
 ### Docker Run
@@ -203,6 +212,7 @@ docker run --rm -i -e SOCIALDATAX_API_KEY="<SOCIALDATAX_API_KEY>" socialdatax-sk
 docker run --rm -i -e SOCIALDATAX_API_KEY="<SOCIALDATAX_API_KEY>" socialdatax-skills kuaishou search --keyword "露营" --pretty
 docker run --rm -i -e SOCIALDATAX_API_KEY="<SOCIALDATAX_API_KEY>" socialdatax-skills weibo search --keyword "露营" --pretty
 docker run --rm -i -e SOCIALDATAX_API_KEY="<SOCIALDATAX_API_KEY>" socialdatax-skills wechat search --keyword "露营" --pretty
+docker run --rm -i -e SOCIALDATAX_API_KEY="<SOCIALDATAX_API_KEY>" socialdatax-skills sensitive-check text --text "<content>" --platform xhs --pretty
 ```
 
 If Docker Hub is slow from your network, keep the default image unchanged for normal use and override only during local builds:
@@ -245,6 +255,7 @@ npx -y socialdatax-skills@latest weibo hot-search --pretty
 npx -y socialdatax-skills@latest weibo search --keyword "露营" --pretty
 npx -y socialdatax-skills@latest wechat hot-search --pretty
 npx -y socialdatax-skills@latest wechat search --keyword "露营" --pretty
+npx -y socialdatax-skills@latest sensitive-check text --text "<content>" --platform xhs --pretty
 ```
 
 Available skills:
@@ -256,6 +267,7 @@ Available skills:
 - `media-transcript`: submit and check video 口播转文字 / speech-to-text transcript jobs through hosted MCP tools; supports XHS, Douyin, Kuaishou, Weibo, and WeChat Channels.
 - `media-user-info`: retrieve creator profile information; supports XHS, Douyin, Kuaishou, Weibo, and WeChat Channels creators.
 - `media-user-posts`: retrieve creator content lists; supports XHS notes, Douyin works, Kuaishou works, Weibo posts, WeChat Channels videos, and Douyin creator short-drama series.
+- `sensitive-check`: run 敏感检测 text checks; supports `generic`, `xhs`, `douyin`, and `kuaishou` platform contexts.
 
 Default install locations:
 
@@ -336,6 +348,13 @@ Current WeChat Channels / 视频号 workflows include:
 - Fetch paginated creator video lists from a finder user_id or a video link/share text.
 - Submit and check WeChat Channels / 视频号 video 口播转文字 / speech-to-text transcript jobs; submit tools 提交完成后最多短等 15 秒.
 
+Current Sensitive Check workflows include:
+
+- Check draft text for 敏感检测 / sensitive-content risks before publishing.
+- Choose a platform context with `--platform generic`, `--platform xhs`, `--platform douyin`, or `--platform kuaishou`.
+- Return structured fields such as `violation`, `risk_level`, `types`, `highlights`, `summary`, `platform`, and `suggestions` when available.
+- Text checks are read-only. Image sensitive detection is reserved for a future separate tool.
+
 ## XHS Tools
 
 | Tool | Public purpose |
@@ -432,6 +451,12 @@ Current WeChat Channels / 视频号 workflows include:
 | `wechat_submit_video_speech_text_by_encrypted_object_id` | Submit a WeChat Channels / 视频号 video speech-to-text transcript job when encrypted_object_id is already known; submit waits up to 15 seconds. |
 | `wechat_get_video_speech_text_job` | Check a WeChat Channels / 视频号 speech-to-text transcript job by job_id without creating a new task. |
 
+## Sensitive Check Tools
+
+| Tool | Public purpose |
+| --- | --- |
+| `check_sensitive_text` | Check text for 敏感检测 / sensitive-content risks with `generic`, `xhs`, `douyin`, or `kuaishou` context. |
+
 ## Quick Start
 
 For agents that can execute shell commands, use the direct CLI. This is the recommended default for installed skills:
@@ -443,9 +468,10 @@ npx -y socialdatax-skills@latest douyin search --keyword "露营" --pretty
 npx -y socialdatax-skills@latest kuaishou search --keyword "露营" --pretty
 npx -y socialdatax-skills@latest weibo search --keyword "露营" --pretty
 npx -y socialdatax-skills@latest wechat search --keyword "露营" --pretty
+npx -y socialdatax-skills@latest sensitive-check text --text "<content>" --platform xhs --pretty
 ```
 
-MCP client configuration belongs to platform MCP listings. For XHS, use the `xhs-insights` docs; for Douyin, use the `douyin-insights` listing; for Kuaishou, use the `kuaishou-insights` listing; for Weibo, use the `weibo-insights` listing; for WeChat Channels / 视频号, use the `wechat-channels-insights` listing.
+MCP client configuration belongs to platform or capability MCP listings. For XHS, use the `xhs-insights` docs; for Douyin, use the `douyin-insights` listing; for Kuaishou, use the `kuaishou-insights` listing; for Weibo, use the `weibo-insights` listing; for WeChat Channels / 视频号, use the `wechat-channels-insights` listing; for 敏感检测, use the `sensitive-check` server.
 
 Aily is treated as an OpenClaw / AgentSkills ecosystem channel for this package. Use the OpenClaw skill install flow for now; a dedicated `--target aily` will be added only after its official skill import or package format is confirmed.
 
@@ -461,7 +487,7 @@ Use the key as a Bearer token in the `Authorization` request header. Do not comm
 
 Public metadata files in this repository:
 
-- [skills](skills): AgentSkills-compatible skills split by social media capability and currently backed by XHS, Douyin, Kuaishou, Weibo, and WeChat Channels tools.
+- [skills](skills): AgentSkills-compatible skills split by capability and currently backed by XHS, Douyin, Kuaishou, Weibo, WeChat Channels, and Sensitive Check tools.
 
 ## License
 

package/cli.mjs

@@ -7,7 +7,7 @@ import { dirname, join, resolve } from "node:path";
 import { fileURLToPath } from "node:url";
 
 const PACKAGE_NAME = "socialdatax-skills";
-const PACKAGE_VERSION = "0.2.11";
+const PACKAGE_VERSION = "0.2.12";
 const PACKAGE_SPEC = `${PACKAGE_NAME}@latest`;
 const LOG_PREFIX = `[${PACKAGE_NAME}]`;
 const MIN_NODE_VERSION = "20.18.1";
@@ -58,6 +58,12 @@ const AVAILABLE_SKILLS = [
       "Retrieve creator content lists for XHS, Douyin, Kuaishou, Weibo, and WeChat Channels, including Douyin creator short-drama series.",
     emoji: "🗂️",
   },
+  {
+    name: "sensitive-check",
+    summary:
+      "Check text content for generic, XHS, Douyin, and Kuaishou sensitive-content risks.",
+    emoji: "🛡️",
+  },
 ];
 const AVAILABLE_SKILL_NAMES = AVAILABLE_SKILLS.map((skill) => skill.name);
 const BOOLEAN_OPTIONS = new Set([
@@ -349,6 +355,17 @@ const WECHAT_OPTION_DISPLAY_NAMES = {
   commentId: "--comment-id",
   userId: "--user-id",
 };
+const SENSITIVE_CHECK_DIRECT_ACTION_OPTIONS = {
+  text: ["text", "platform", "pretty"],
+};
+const SENSITIVE_CHECK_DIRECT_ACTION_NAMES = Object.keys(
+  SENSITIVE_CHECK_DIRECT_ACTION_OPTIONS
+).join(", ");
+const SENSITIVE_CHECK_PLATFORMS = ["generic", "xhs", "douyin", "kuaishou"];
+const SENSITIVE_CHECK_OPTION_DISPLAY_NAMES = {
+  text: "--text",
+  platform: "--platform",
+};
 const PLATFORMS = {
   xhs: {
     id: "xhs",
@@ -748,6 +765,27 @@ const PLATFORMS = {
       },
     ],
   },
+  "sensitive-check": {
+    id: "sensitive-check",
+    displayName: "Sensitive Check / 敏感检测",
+    status: "public",
+    registryName: "sensitive-check",
+    futureRegistryName: "com.socialdatax/sensitive-check",
+    endpoint: "https://mcp.52choujiang.com/sensitive-check/mcp",
+    apiKeyEnv: API_KEY_ENV_NAMES,
+    upstreamEnv: [
+      "SOCIALDATAX_SENSITIVE_CHECK_MCP_UPSTREAM_URL",
+      "SOCIAL_MEDIA_SENSITIVE_CHECK_MCP_UPSTREAM_URL",
+      "SOCIAL_MEDIA_MCP_UPSTREAM_URL",
+    ],
+    tools: [
+      {
+        name: "check_sensitive_text",
+        description:
+          "Check text content for generic, XHS, Douyin, or Kuaishou sensitive-content risks.",
+      },
+    ],
+  },
 };
 const currentDir = dirname(fileURLToPath(import.meta.url));
 let mcpSdkModules;
@@ -787,6 +825,8 @@ if (isMainModule()) {
       await runWeiboDirectCommand(cliArgs.slice(1));
     } else if (command === "wechat") {
       await runWechatDirectCommand(cliArgs.slice(1));
+    } else if (command === "sensitive-check") {
+      await runSensitiveCheckDirectCommand(cliArgs.slice(1));
     } else if (command === "--platform" || command?.startsWith("--platform=") || command === "print-config") {
       printRemovedMcpConfigHelp(command);
       process.exitCode = 1;
@@ -947,6 +987,21 @@ function validateWechatDirectActionOptions(action, options) {
   }
 }
 
+function validateSensitiveCheckDirectActionOptions(action, options) {
+  const allowedOptions = SENSITIVE_CHECK_DIRECT_ACTION_OPTIONS[action];
+  if (!allowedOptions) {
+    return;
+  }
+
+  validateKnownOptions(options, allowedOptions);
+  validateFlagOption(options, "pretty", "--pretty");
+  for (const key of allowedOptions) {
+    if (!DIRECT_BOOLEAN_OPTIONS.has(key)) {
+      requireOptionValue(options, key, SENSITIVE_CHECK_OPTION_DISPLAY_NAMES[key]);
+    }
+  }
+}
+
 function validateDirectPaginationOptions(platformId, action, options) {
   validateFlagOption(options, "pretty", "--pretty");
   validateFlagOption(options, "all", "--all");
@@ -1615,6 +1670,9 @@ function printHelp() {
   console.log(`  npx -y ${PACKAGE_SPEC} wechat user-posts --url "<wechat_video_url_or_share_text>" --pretty`);
   console.log("      Call the WeChat Channels / 视频号 creator videos tool from a video link or share text.");
   console.log("");
+  console.log(`  npx -y ${PACKAGE_SPEC} sensitive-check text --text "<content>" --platform xhs --pretty`);
+  console.log("      Call the SocialDataX 敏感检测 text tool directly and print JSON.");
+  console.log("");
   console.log(`  npx -y ${PACKAGE_SPEC} list`);
   console.log("      List available skills.");
   console.log("");
@@ -1694,6 +1752,10 @@ function printHelp() {
   console.log("  --profile-url <profile-url-or-share-text>");
   console.log("  --user-id <user_id>");
   console.log("  --sec-user-id <sec_user_id>");
+  console.log("  --text <content>");
+  console.log("      Text content for sensitive-check text.");
+  console.log("  --platform <generic|xhs|douyin|kuaishou>");
+  console.log("      Target platform for sensitive-check text; default is generic.");
   console.log("  --pages <number>");
   console.log("      Fetch and merge N pages from the current starting point for search, comments, replies, creator content lists, and creator series.");
   console.log("  --all");
@@ -1898,6 +1960,30 @@ async function runWechatDirectCommand(args) {
   process.stdout.write("\n");
 }
 
+async function runSensitiveCheckDirectCommand(args) {
+  const { options, positional } = parseCommandArgs(args);
+  const action = positional[0];
+  if (!action) {
+    throw new Error(
+      `Missing sensitive-check command. Use ${SENSITIVE_CHECK_DIRECT_ACTION_NAMES}.`
+    );
+  }
+  if (positional.length > 1) {
+    throw new Error(`Unexpected argument: ${positional[1]}`);
+  }
+  validateSensitiveCheckDirectActionOptions(action, options);
+
+  const operation = buildSensitiveCheckOperation(action, options);
+  const data = await callDirectOperation(operation);
+  const envelope = {
+    platform: operation.platform.id,
+    tool: operation.tool,
+    data,
+  };
+  process.stdout.write(JSON.stringify(envelope, null, options.pretty ? 2 : 0));
+  process.stdout.write("\n");
+}
+
 function buildXhsOperation(action, options) {
   switch (action) {
     case "hot-search":
@@ -2360,6 +2446,21 @@ function buildWechatOperation(action, options) {
   }
 }
 
+function buildSensitiveCheckOperation(action, options) {
+  switch (action) {
+    case "text":
+      return buildDirectOperation(
+        "text",
+        buildSensitiveCheckTextCall(options),
+        PLATFORMS["sensitive-check"]
+      );
+    default:
+      throw new Error(
+        `Unsupported sensitive-check command "${action}". Use ${SENSITIVE_CHECK_DIRECT_ACTION_NAMES}.`
+      );
+  }
+}
+
 function buildDirectOperation(operation, { tool, toolArguments }, platform = PLATFORMS.xhs) {
   return {
     platform,
@@ -2583,6 +2684,25 @@ function buildWechatSearchCall(options) {
   };
 }
 
+function buildSensitiveCheckTextCall(options) {
+  if (!options.text) {
+    throw new Error("Missing --text for sensitive-check text.");
+  }
+  const platform = parseAllowedStringOption(
+    options.platform || "generic",
+    "--platform",
+    SENSITIVE_CHECK_PLATFORMS,
+    SENSITIVE_CHECK_PLATFORMS.join(", ")
+  );
+  return {
+    tool: "check_sensitive_text",
+    toolArguments: {
+      text: options.text,
+      platform,
+    },
+  };
+}
+
 function buildDouyinRepliesCall(options) {
   if (!options.awemeId) {
     throw new Error("Missing --aweme-id for douyin replies.");

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "socialdatax-skills",
-  "version": "0.2.11",
+  "version": "0.2.12",
   "description": "SocialDataX / 社媒数据助手 skill installer and direct CLI helper for hosted platform social media MCP services.",
   "license": "MIT",
   "type": "module",
@@ -56,7 +56,12 @@
     "wechat",
     "wechat-channels",
     "wechat-channels-data",
-    "wechat-channels-search"
+    "wechat-channels-search",
+    "sensitive-check",
+    "sensitive-checking",
+    "content-safety",
+    "text-safety",
+    "sensitive-detection"
   ],
   "homepage": "https://socialdatax.com",
   "bugs": {
@@ -71,5 +76,9 @@
   },
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.29.0"
+  },
+  "overrides": {
+    "hono": "4.12.27",
+    "qs": "6.15.3"
   }
 }

package/skills/sensitive-check/SKILL.md

@@ -0,0 +1,71 @@
+---
+name: "sensitive-check"
+description: "Check draft text for sensitive-content risks before publishing. Supports generic, xhs, douyin, and kuaishou contexts through SocialDataX."
+metadata:
+  openclaw:
+    requires:
+      env:
+        - "SOCIALDATAX_API_KEY"
+      bins:
+        - "node"
+        - "npm"
+    primaryEnv: "SOCIALDATAX_API_KEY"
+    install:
+      - kind: "node"
+        package: "socialdatax-skills"
+        bins: []
+    emoji: "🛡️"
+    homepage: "https://socialdatax.com/?from=npm"
+---
+<!-- AUTO-GENERATED from socialdatax-skill-source. Do not edit directly; run `node scripts/generate_socialdatax_skills.mjs`. -->
+
+# 敏感检测 SocialDataX
+
+Use this skill when the user wants 敏感检测, sensitive check, content safety review, or platform-aware review for text drafts before publishing.
+
+Current platform support:
+
+- Text sensitive-content detection through `check_sensitive_text` for `generic`, `xhs`, `douyin`, and `kuaishou` contexts.
+
+## API Key
+
+Use `SOCIALDATAX_API_KEY` for SocialDataX requests. The only official website for requesting or managing API access is <https://socialdatax.com/?from=npm>. If a user asks where to get a key, provide only this URL; do not infer alternate domains.
+获取或管理 API Key：访问 <https://socialdatax.com/?from=npm>，按官网的 API Key 申请/管理入口操作。环境变量名固定使用 `SOCIALDATAX_API_KEY`；不要引导用户使用其他域名。
+
+## Preferred Direct CLI
+
+Prefer the direct CLI when the agent can run shell commands. It does not require MCP server configuration:
+
+```bash
+npx -y socialdatax-skills@latest sensitive-check text --text "<content>" --platform xhs --pretty
+```
+
+Required arguments:
+
+- `sensitive-check text --text <content>`: required text to check. Use the user's draft text for analysis, but do not store it in the skill.
+
+Optional arguments:
+
+- `--platform <generic|xhs|douyin|kuaishou>`: platform context; default is `generic`.
+- `--pretty`: output formatting only.
+
+Use this skill when the user wants 敏感检测, sensitive check, content safety review, or platform-aware preflight review for draft text.
+The command prints JSON with `platform`, `tool`, and `data`; it does not echo the original text back in CLI arguments. The service returns `violation`, `risk_level`, `types`, `highlights`, `summary`, `platform`, and `suggestions` when available.
+This v1 skill checks text only. Image sensitive detection is intentionally out of scope until a separate image tool is published.
+
+## Safety Boundary
+
+This skill is read-only. It does not read local browser data, does not save API keys, and does not perform login, posting, liking, commenting, or account changes. Prefer the direct CLI; hosted MCP tools are optional when the current agent already supports authenticated streamable HTTP MCP.
+
+## MCP Tools
+
+MCP tools matching the direct CLI commands above:
+
+- `check_sensitive_text`
+
+If MCP tools are already available in the current agent, call `check_sensitive_text` with `text` and optional `platform`: `generic`, `xhs`, `douyin`, or `kuaishou`.
+
+## Output Guidance
+
+Report whether there is a violation, the risk level, detected types, brief highlights, and concrete rewrite suggestions.
+Do not echo the full original text back unless the user explicitly asks; prefer short highlights and safer rewrite guidance.

package/skills/sensitive-check/agents/openai.yaml

@@ -0,0 +1,7 @@
+interface:
+  display_name: "Sensitive Check"
+  short_description: "Check draft text risks"
+  default_prompt: "Use $sensitive-check to check text drafts for sensitive-content risks with SocialDataX."
+
+policy:
+  allow_implicit_invocation: true