socialdatax-skills 0.2.16 → 0.2.17

package/README.md

@@ -68,7 +68,7 @@ Common search phrases for this skill package:
 - Sensitive Check MCP server name: `sensitive-check`
 - Sensitive Check future MCP registry name: `com.socialdatax/sensitive-check`
 - Unified MCP registry name: none; this package installs skills and calls explicit platform services.
-- Current public capability version: `0.2.16`
+- Current public capability version: `0.2.17`
 
 ## Direct CLI
 
@@ -120,9 +120,7 @@ npx -y socialdatax-skills@latest weibo comments --post-id "<post_id>" --all --in
 npx -y socialdatax-skills@latest weibo comments --post-url "<weibo_post_url_or_share_text>" --pretty
 npx -y socialdatax-skills@latest weibo replies --post-id "<post_id>" --comment-id "<comment_id>" --pretty
 npx -y socialdatax-skills@latest weibo likers --post-id "<post_id>" --pretty
-npx -y socialdatax-skills@latest weibo likers --post-url "<weibo_post_url_or_share_text>" --pretty
 npx -y socialdatax-skills@latest weibo reposts --post-id "<post_id>" --pretty
-npx -y socialdatax-skills@latest weibo reposts --post-url "<weibo_post_url_or_share_text>" --pretty
 npx -y socialdatax-skills@latest weibo user-info --user-id "<user_id>" --pretty
 npx -y socialdatax-skills@latest weibo user-info --profile-url "<profile_url_or_share_text>" --pretty
 npx -y socialdatax-skills@latest weibo user-posts --user-id "<user_id>" --pretty
@@ -139,10 +137,9 @@ npx -y socialdatax-skills@latest wechat user-info --user-id "<finder_user_id>" -
 npx -y socialdatax-skills@latest wechat user-posts --user-id "<finder_user_id>" --pretty
 npx -y socialdatax-skills@latest wechat user-posts --url "<wechat_video_url_or_share_text>" --pretty
 npx -y socialdatax-skills@latest sensitive-check text --text "<content>" --platform xhs --pretty
-cat draft.txt | npx -y socialdatax-skills@latest sensitive-check text --text-stdin --platform xhs --pretty
 ```
 
-Most direct CLI commands print a JSON envelope with `platform`, `tool`, `arguments`, and `data`. `sensitive-check` prints `platform`, `tool`, and `data` only; it does not echo the original text in CLI output. SocialDataX service records the submitted text and structured detection result for history, billing, and troubleshooting; the local CLI does not write API keys to local files or write local text copies.
+Most direct CLI commands print a JSON envelope with `platform`, `tool`, `arguments`, and `data`. `sensitive-check` prints `platform`, `tool`, and `data` only; it does not echo the original text in CLI output.
 
 For XHS outputs with a returned `note_url` field, when `note_url` is non-null, preserve it exactly as the full URL, including `xsec_token` query parameters, such as in final answers or display. Do not modify, truncate, redact, normalize, rebuild, or replace it with a link assembled from `note_id`. If `note_url` is null, do not synthesize a public link from `note_id`.
 
@@ -158,6 +155,8 @@ For commands that accept `--page-token`, continue only with the complete returne
 
 Search pagination uses `--page-token` when continuing with a returned `next_page_token`. Omit `--page-token` on the first search request and pass the complete returned `next_page_token` only when continuing the same search chain.
 
+Generated Agent Skill examples include `--source-client socialdatax-skills --source-platform <marketplace> --source-skill <skill-slug>` so SocialDataX can attribute direct CLI usage to the current marketplace Skill. Keep those values unchanged when running commands from a Skill; omit them for ad hoc CLI use. The direct CLI also accepts `SOCIALDATAX_SOURCE_CLIENT`, `SOCIALDATAX_SOURCE_PLATFORM`, and `SOCIALDATAX_SOURCE_SKILL` as environment-variable fallbacks.
+
 XHS, Douyin, Kuaishou, Weibo, and WeChat Channels search use `--keyword` and optional `--page-token`.
 Kuaishou work search uses `kuaishou search --keyword` and optional `--page-token`; Kuaishou creator search uses `kuaishou user-search --keyword` and optional `--page-token`. Kuaishou search does not accept Douyin semantic filters, and `kuaishou user-search` does not support `--since-days`.
 Weibo and WeChat Channels search use `--keyword` and optional `--page-token`.
@@ -194,7 +193,7 @@ npx -y socialdatax-skills@latest doctor
 npx -y socialdatax-skills@latest doctor --json
 ```
 
-The public package declares no npm lifecycle scripts such as `preinstall`, `install`, or `postinstall`. The installer copies AgentSkills files only, does not write API keys to local files, and does not change MCP server configuration. Authenticated data calls require `SOCIALDATAX_API_KEY` at runtime, do not read local browser data, and do not perform account actions.
+The public package declares no npm lifecycle scripts such as `preinstall`, `install`, or `postinstall`. The installer copies AgentSkills files only, does not save API keys, and does not change MCP server configuration. Authenticated data calls require `SOCIALDATAX_API_KEY` at runtime, do not read local browser data, and do not perform account actions.
 
 ## Platform Names
 
@@ -264,7 +263,6 @@ npx -y socialdatax-skills@latest weibo search --keyword "露营" --pretty
 npx -y socialdatax-skills@latest wechat hot-search --pretty
 npx -y socialdatax-skills@latest wechat search --keyword "露营" --pretty
 npx -y socialdatax-skills@latest sensitive-check text --text "<content>" --platform xhs --pretty
-cat draft.txt | npx -y socialdatax-skills@latest sensitive-check text --text-stdin --platform xhs --pretty
 ```
 
 Available skills:
@@ -316,8 +314,8 @@ Current Kuaishou workflows include:
 - Fetch paginated first-level comments for comment analysis.
 - Fetch paginated replies under a first-level comment.
 - Continue Kuaishou list pagination only when `next_page_token` is non-empty; an empty string means there are no more results to request.
-- Read creator profile data from a profile link, short link, share text, or user_id.
-- Fetch paginated creator work lists from a user_id, profile link, short link, or share text.
+- Read creator profile data from a non-empty user_id, profile link, short link, or share text. Live/fw-user profile shares are supported for profile data; successful results return a reusable non-empty user_id.
+- Fetch paginated creator work lists from a non-empty user_id, or from a profile link, short link, or share text that resolves directly to a non-empty user_id. For live/fw-user profile shares, call creator profile first and use the returned non-empty user_id.
 - Submit and check video work 口播转文字 / speech-to-text transcript jobs; submit tools 提交完成后最多短等 15 秒.
 
 Current Douyin workflows include:
@@ -340,10 +338,9 @@ Current Weibo workflows include:
 - Resolve a Weibo post URL, short link, share text, or post_id into structured post details.
 - Fetch paginated first-level comments for comment analysis.
 - Fetch paginated replies under a first-level comment.
-- Fetch paginated liker and repost lists from a post_id, post URL, short link, or share text.
 - Continue Weibo list pagination only when `next_page_token` is non-empty; an empty string means there are no more results to request.
-- Read user profile data from a profile link, short link, share text, or user_id.
-- Fetch paginated user post lists from a user_id, profile link, short link, or share text.
+- Read creator profile data from a profile link, short link, share text, or user_id.
+- Fetch paginated creator post lists from a user_id, profile link, short link, or share text.
 - Submit and check Weibo video 口播转文字 / speech-to-text transcript jobs; submit tools 提交完成后最多短等 15 秒.
 
 Current WeChat Channels / 视频号 workflows include:
@@ -361,10 +358,8 @@ Current WeChat Channels / 视频号 workflows include:
 Current Sensitive Check workflows include:
 
 - Check draft text for 敏感检测 / sensitive-content risks before publishing.
-- Pass short drafts with `--text`, or pipe longer/sensitive drafts through `--text-stdin` so the text is not placed directly in the shell command.
 - Choose a platform context with `--platform generic`, `--platform xhs`, `--platform douyin`, or `--platform kuaishou`.
 - Return structured fields such as `violation`, `risk_level`, `types`, `highlights`, `summary`, `platform`, and `suggestions` when available.
-- SocialDataX service records submitted text and structured detection results for history, billing, and troubleshooting; the local CLI does not write API keys to local files or write local text copies.
 - Text checks are read-only. Image sensitive detection is reserved for a future separate tool.
 
 ## XHS Tools
@@ -418,10 +413,10 @@ Current Sensitive Check workflows include:
 | `kuaishou_get_video_comments_by_photo_id` | Fetch paginated first-level comments when the caller already has a photo_id. |
 | `kuaishou_get_video_comments_by_url` | Fetch paginated first-level comments directly from a Kuaishou work page link, short link, or share text. |
 | `kuaishou_get_video_comment_replies_by_comment_id` | Fetch paginated replies under a first-level comment by photo_id and comment_id. |
-| `kuaishou_get_user_info_by_user_id` | Fetch creator profile data when the caller already has a user_id. |
-| `kuaishou_get_user_info_by_profile_url` | Resolve a Kuaishou profile link, short link, or share text into creator profile data. |
-| `kuaishou_get_user_posted_videos_by_user_id` | Fetch a paginated list of works published by a creator when the caller already has a user_id. |
-| `kuaishou_get_user_posted_videos_by_profile_url` | Fetch a paginated list of works published by a creator from a profile link, short link, or share text. |
+| `kuaishou_get_user_info_by_user_id` | Fetch creator profile data when the caller already has a non-empty user_id. |
+| `kuaishou_get_user_info_by_profile_url` | Resolve a Kuaishou profile link, including live/fw-user profile shares, short link, or share text into creator profile data; successful results return a reusable non-empty user_id. |
+| `kuaishou_get_user_posted_videos_by_user_id` | Fetch a paginated list of works published by a creator when the caller already has a non-empty user_id. |
+| `kuaishou_get_user_posted_videos_by_profile_url` | Fetch a paginated list of works published by a creator from a profile link, short link, or share text that resolves directly to a non-empty user_id; for live/fw-user profile shares, call creator profile first and use the returned non-empty user_id. |
 | `kuaishou_submit_video_speech_text_by_video_url` | Submit a Kuaishou video speech-to-text transcript job from a work page link, short link, or share text; submit waits up to 15 seconds. |
 | `kuaishou_submit_video_speech_text_by_photo_id` | Submit a Kuaishou video speech-to-text transcript job when the caller already has a photo_id; submit waits up to 15 seconds. |
 | `kuaishou_get_video_speech_text_job` | Check a Kuaishou speech-to-text transcript job by job_id without creating a new task. |
@@ -437,14 +432,10 @@ Current Sensitive Check workflows include:
 | `weibo_get_post_comments_by_post_id` | Fetch paginated first-level comments when the caller already has a post_id. |
 | `weibo_get_post_comments_by_post_url` | Fetch paginated first-level comments directly from a Weibo post URL, short link, or share text. |
 | `weibo_get_post_comment_replies_by_comment_id` | Fetch paginated replies under a first-level comment by post_id and comment_id. |
-| `weibo_get_post_liker_list_by_post_id` | Fetch paginated users who liked a Weibo post by post_id. |
-| `weibo_get_post_liker_list_by_post_url` | Fetch paginated users who liked a Weibo post from a post URL, short link, or share text. |
-| `weibo_get_post_repost_list_by_post_id` | Fetch paginated reposts for a Weibo post by post_id. |
-| `weibo_get_post_repost_list_by_post_url` | Fetch paginated reposts for a Weibo post from a post URL, short link, or share text. |
-| `weibo_get_user_info_by_user_id` | Fetch user profile data when the caller already has a user_id. |
-| `weibo_get_user_info_by_profile_url` | Resolve a Weibo profile link, short link, or share text into user profile data. |
-| `weibo_get_user_posts_by_user_id` | Fetch a paginated list of posts published by a user when the caller already has a user_id. |
-| `weibo_get_user_posts_by_profile_url` | Fetch a paginated list of posts published by a user from a profile link, short link, or share text. |
+| `weibo_get_user_info_by_user_id` | Fetch creator profile data when the caller already has a user_id. |
+| `weibo_get_user_info_by_profile_url` | Resolve a Weibo profile link, short link, or share text into creator profile data. |
+| `weibo_get_user_posts_by_user_id` | Fetch a paginated list of posts published by a creator when the caller already has a user_id. |
+| `weibo_get_user_posts_by_profile_url` | Fetch a paginated list of posts published by a creator from a profile link, short link, or share text. |
 | `weibo_submit_video_speech_text_by_post_url` | Submit a Weibo video speech-to-text transcript job from a post URL, short link, or share text; submit waits up to 15 seconds. |
 | `weibo_submit_video_speech_text_by_post_id` | Submit a Weibo video speech-to-text transcript job when the caller already has a post_id; submit waits up to 15 seconds. |
 | `weibo_get_video_speech_text_job` | Check a Weibo speech-to-text transcript job by job_id without creating a new task. |
@@ -485,7 +476,6 @@ npx -y socialdatax-skills@latest kuaishou search --keyword "露营" --pretty
 npx -y socialdatax-skills@latest weibo search --keyword "露营" --pretty
 npx -y socialdatax-skills@latest wechat search --keyword "露营" --pretty
 npx -y socialdatax-skills@latest sensitive-check text --text "<content>" --platform xhs --pretty
-cat draft.txt | npx -y socialdatax-skills@latest sensitive-check text --text-stdin --platform xhs --pretty
 ```
 
 MCP client configuration belongs to platform or capability MCP listings. For XHS, use the `xhs-insights` docs; for Douyin, use the `douyin-insights` listing; for Kuaishou, use the `kuaishou-insights` listing; for Weibo, use the `weibo-insights` listing; for WeChat Channels / 视频号, use the `wechat-channels-insights` listing; for 敏感检测, use the `sensitive-check` server.

package/cli.mjs

@@ -7,7 +7,7 @@ import { dirname, join, resolve } from "node:path";
 import { fileURLToPath } from "node:url";
 
 const PACKAGE_NAME = "socialdatax-skills";
-const PACKAGE_VERSION = "0.2.16";
+const PACKAGE_VERSION = "0.2.17";
 const PACKAGE_SPEC = `${PACKAGE_NAME}@latest`;
 const LOG_PREFIX = `[${PACKAGE_NAME}]`;
 const MIN_NODE_VERSION = "20.18.1";
@@ -15,6 +15,16 @@ const HOMEPAGE_URL = "https://socialdatax.com";
 const PRIMARY_API_KEY_ENV = "SOCIALDATAX_API_KEY";
 const LEGACY_API_KEY_ENV = "SOCIAL_MEDIA_MCP_API_KEY";
 const API_KEY_ENV_NAMES = [PRIMARY_API_KEY_ENV, LEGACY_API_KEY_ENV];
+const SOURCE_CLIENT_ENV = "SOCIALDATAX_SOURCE_CLIENT";
+const SOURCE_PLATFORM_ENV = "SOCIALDATAX_SOURCE_PLATFORM";
+const SOURCE_SKILL_ENV = "SOCIALDATAX_SOURCE_SKILL";
+const SOURCE_CLIENT_ENV_NAMES = [SOURCE_CLIENT_ENV];
+const SOURCE_PLATFORM_ENV_NAMES = [SOURCE_PLATFORM_ENV];
+const SOURCE_SKILL_ENV_NAMES = [SOURCE_SKILL_ENV];
+const SOURCE_CLIENT_HEADER = "X-SocialDataX-Client";
+const SOURCE_PLATFORM_HEADER = "X-SocialDataX-Source-Platform";
+const SOURCE_SKILL_HEADER = "X-SocialDataX-Source-Skill";
+const SOURCE_ATTRIBUTION_PATTERN = /^[a-z0-9][a-z0-9-]{0,99}$/;
 const AVAILABLE_SKILLS = [
   {
     name: "socialdatax-content-research-assistant",
@@ -73,14 +83,9 @@ const BOOLEAN_OPTIONS = new Set([
   "includeReplies",
   "json",
   "pretty",
-  "textStdin",
-]);
-const DIRECT_BOOLEAN_OPTIONS = new Set([
-  "all",
-  "includeReplies",
-  "pretty",
-  "textStdin",
 ]);
+const DIRECT_BOOLEAN_OPTIONS = new Set(["all", "includeReplies", "pretty"]);
+const DIRECT_META_OPTIONS = ["sourceClient", "sourcePlatform", "sourceSkill"];
 const INSTALL_TARGETS = ["openclaw", "hermes", "agents", "codex", "claude-code", "claude"];
 const VALID_SCOPES = ["user", "workspace", "shared"];
 const XHS_DIRECT_ACTION_OPTIONS = {
@@ -312,8 +317,8 @@ const WEIBO_DIRECT_ACTION_OPTIONS = {
     "includeReplies",
     "pretty",
   ],
-  likers: ["postId", "postUrl", "pageToken", "pages", "all", "maxItems", "pretty"],
-  reposts: ["postId", "postUrl", "pageToken", "pages", "all", "maxItems", "pretty"],
+  likers: ["postId", "pageToken", "pages", "all", "maxItems", "pretty"],
+  reposts: ["postId", "pageToken", "pages", "all", "maxItems", "pretty"],
   "user-info": ["userId", "profileUrl", "pretty"],
   "user-posts": [
     "userId",
@@ -419,7 +424,7 @@ const WECHAT_OPTION_DISPLAY_NAMES = {
   userId: "--user-id",
 };
 const SENSITIVE_CHECK_DIRECT_ACTION_OPTIONS = {
-  text: ["text", "textStdin", "platform", "pretty"],
+  text: ["text", "platform", "pretty"],
 };
 const SENSITIVE_CHECK_DIRECT_ACTION_NAMES = Object.keys(
   SENSITIVE_CHECK_DIRECT_ACTION_OPTIONS
@@ -427,7 +432,6 @@ const SENSITIVE_CHECK_DIRECT_ACTION_NAMES = Object.keys(
 const SENSITIVE_CHECK_PLATFORMS = ["generic", "xhs", "douyin", "kuaishou"];
 const SENSITIVE_CHECK_OPTION_DISPLAY_NAMES = {
   text: "--text",
-  textStdin: "--text-stdin",
   platform: "--platform",
 };
 const PLATFORMS = {
@@ -643,19 +647,22 @@ const PLATFORMS = {
       },
       {
         name: "kuaishou_get_user_info_by_user_id",
-        description: "Fetch creator profile data when the caller already has a user_id.",
+        description: "Fetch creator profile data when the caller already has a non-empty user_id.",
       },
       {
         name: "kuaishou_get_user_info_by_profile_url",
-        description: "Resolve a Kuaishou profile link, short link, or share text into creator profile data.",
+        description:
+          "Resolve a Kuaishou profile link, including live/fw-user profile shares, short link, or share text into creator profile data; successful results return a reusable non-empty user_id.",
       },
       {
         name: "kuaishou_get_user_posted_videos_by_user_id",
-        description: "Fetch a paginated list of works published by a creator when the caller already has a user_id.",
+        description:
+          "Fetch a paginated list of works published by a creator when the caller already has a non-empty user_id.",
       },
       {
         name: "kuaishou_get_user_posted_videos_by_profile_url",
-        description: "Fetch a paginated list of works published by a creator from a profile link, short link, or share text.",
+        description:
+          "Fetch a paginated list of works published by a creator from a profile link, short link, or share text that resolves directly to a non-empty user_id; for live/fw-user profile shares, call creator profile first and use the returned non-empty user_id.",
       },
       {
         name: "kuaishou_submit_video_speech_text_by_video_url",
@@ -721,20 +728,10 @@ const PLATFORMS = {
         name: "weibo_get_post_liker_list_by_post_id",
         description: "Fetch a paginated list of users who liked a Weibo post by post_id.",
       },
-      {
-        name: "weibo_get_post_liker_list_by_post_url",
-        description:
-          "Fetch a paginated list of users who liked a Weibo post from a post URL, short link, or share text.",
-      },
       {
         name: "weibo_get_post_repost_list_by_post_id",
         description: "Fetch a paginated repost list for a Weibo post by post_id.",
       },
-      {
-        name: "weibo_get_post_repost_list_by_post_url",
-        description:
-          "Fetch a paginated repost list for a Weibo post from a post URL, short link, or share text.",
-      },
       {
         name: "weibo_get_user_info_by_user_id",
         description: "Fetch creator profile data when the caller already has a user_id.",
@@ -975,6 +972,10 @@ function validateKnownOptions(options, allowedOptions) {
   }
 }
 
+function allowedDirectOptions(allowedOptions) {
+  return [...allowedOptions, ...DIRECT_META_OPTIONS];
+}
+
 function requireOptionValue(options, key, displayName) {
   if (options[key] === true || options[key] === "") {
     throw new Error(`Missing value for ${displayName}.`);
@@ -993,7 +994,8 @@ function validateXhsDirectActionOptions(action, options) {
     return;
   }
 
-  validateKnownOptions(options, allowedOptions);
+  validateKnownOptions(options, allowedDirectOptions(allowedOptions));
+  validateDirectMetaOptions(options);
   validateDirectPaginationOptions("xhs", action, options);
   for (const key of allowedOptions) {
     if (!DIRECT_BOOLEAN_OPTIONS.has(key)) {
@@ -1008,7 +1010,8 @@ function validateDouyinDirectActionOptions(action, options) {
     return;
   }
 
-  validateKnownOptions(options, allowedOptions);
+  validateKnownOptions(options, allowedDirectOptions(allowedOptions));
+  validateDirectMetaOptions(options);
   validateDirectPaginationOptions("douyin", action, options);
   for (const key of allowedOptions) {
     if (!DIRECT_BOOLEAN_OPTIONS.has(key)) {
@@ -1023,7 +1026,8 @@ function validateKuaishouDirectActionOptions(action, options) {
     return;
   }
 
-  validateKnownOptions(options, allowedOptions);
+  validateKnownOptions(options, allowedDirectOptions(allowedOptions));
+  validateDirectMetaOptions(options);
   validateDirectPaginationOptions("kuaishou", action, options);
   for (const key of allowedOptions) {
     if (!DIRECT_BOOLEAN_OPTIONS.has(key)) {
@@ -1038,7 +1042,8 @@ function validateWeiboDirectActionOptions(action, options) {
     return;
   }
 
-  validateKnownOptions(options, allowedOptions);
+  validateKnownOptions(options, allowedDirectOptions(allowedOptions));
+  validateDirectMetaOptions(options);
   validateDirectPaginationOptions("weibo", action, options);
   for (const key of allowedOptions) {
     if (!DIRECT_BOOLEAN_OPTIONS.has(key)) {
@@ -1053,7 +1058,8 @@ function validateWechatDirectActionOptions(action, options) {
     return;
   }
 
-  validateKnownOptions(options, allowedOptions);
+  validateKnownOptions(options, allowedDirectOptions(allowedOptions));
+  validateDirectMetaOptions(options);
   validateDirectPaginationOptions("wechat", action, options);
   for (const key of allowedOptions) {
     if (!DIRECT_BOOLEAN_OPTIONS.has(key)) {
@@ -1068,9 +1074,9 @@ function validateSensitiveCheckDirectActionOptions(action, options) {
     return;
   }
 
-  validateKnownOptions(options, allowedOptions);
+  validateKnownOptions(options, allowedDirectOptions(allowedOptions));
+  validateDirectMetaOptions(options);
   validateFlagOption(options, "pretty", "--pretty");
-  validateFlagOption(options, "textStdin", "--text-stdin");
   for (const key of allowedOptions) {
     if (!DIRECT_BOOLEAN_OPTIONS.has(key)) {
       requireOptionValue(options, key, SENSITIVE_CHECK_OPTION_DISPLAY_NAMES[key]);
@@ -1078,6 +1084,21 @@ function validateSensitiveCheckDirectActionOptions(action, options) {
   }
 }
 
+function validateDirectMetaOptions(options) {
+  if (options.sourceClient !== undefined) {
+    requireOptionValue(options, "sourceClient", "--source-client");
+    normalizeSourceAttribution(options.sourceClient, "--source-client");
+  }
+  if (options.sourcePlatform !== undefined) {
+    requireOptionValue(options, "sourcePlatform", "--source-platform");
+    normalizeSourceAttribution(options.sourcePlatform, "--source-platform");
+  }
+  if (options.sourceSkill !== undefined) {
+    requireOptionValue(options, "sourceSkill", "--source-skill");
+    normalizeSourceAttribution(options.sourceSkill, "--source-skill");
+  }
+}
+
 function validateDirectPaginationOptions(platformId, action, options) {
   validateFlagOption(options, "pretty", "--pretty");
   validateFlagOption(options, "all", "--all");
@@ -1227,6 +1248,47 @@ function readFirstEnv(names) {
   return undefined;
 }
 
+function normalizeSourceAttribution(value, displayName) {
+  const text = String(value || "").trim().toLowerCase();
+  if (!text) {
+    return "";
+  }
+  if (!SOURCE_ATTRIBUTION_PATTERN.test(text)) {
+    throw new Error(
+      `${displayName} must be a lowercase skill slug using letters, numbers, and hyphens.`
+    );
+  }
+  return text;
+}
+
+function resolveSourceAttribution(options = {}) {
+  return {
+    sourceClient:
+      options.sourceClient !== undefined
+        ? normalizeSourceAttribution(options.sourceClient, "--source-client")
+        : normalizeSourceAttribution(
+            readFirstEnv(SOURCE_CLIENT_ENV_NAMES) || PACKAGE_NAME,
+            SOURCE_CLIENT_ENV
+          ),
+    sourcePlatform:
+      options.sourcePlatform !== undefined
+        ? normalizeSourceAttribution(options.sourcePlatform, "--source-platform")
+        : normalizeSourceAttribution(
+            readFirstEnv(SOURCE_PLATFORM_ENV_NAMES),
+            SOURCE_PLATFORM_ENV
+          ),
+    sourceSkill:
+      options.sourceSkill !== undefined
+        ? normalizeSourceAttribution(options.sourceSkill, "--source-skill")
+        : normalizeSourceAttribution(readFirstEnv(SOURCE_SKILL_ENV_NAMES), SOURCE_SKILL_ENV),
+  };
+}
+
+function attachDirectMetadata(operation, options) {
+  operation.sourceAttribution = resolveSourceAttribution(options);
+  return operation;
+}
+
 function resolveUpstreamUrl(platform) {
   return readFirstEnv(platform.upstreamEnv) || platform.endpoint;
 }
@@ -1388,10 +1450,15 @@ async function installSkills(args) {
   console.log("Data calls do not perform login, posting, editing, liking, commenting, or account actions.");
   console.log("Configure your API Key before making authenticated calls:");
   console.log(`  export ${PRIMARY_API_KEY_ENV}="<${PRIMARY_API_KEY_ENV}>"`);
+  printInstalledSkillAttributionNote();
+}
+
+function printInstalledSkillAttributionNote() {
   console.log("");
-  console.log("Direct CLI examples:");
-  console.log(`  npx -y ${PACKAGE_SPEC} xhs search --keyword "露营" --pretty`);
-  console.log(`  npx -y ${PACKAGE_SPEC} xhs detail --note-id "<note_id>" --pretty`);
+  console.log(
+    "Direct CLI examples in installed SKILL.md files already include source attribution for agents."
+  );
+  console.log("No extra source attribution setup is required.");
 }
 
 function resolveInstallDestination({
@@ -1577,7 +1644,7 @@ function printDoctor(args) {
   console.log("Install safety:");
   console.log("- npm lifecycle scripts: none declared by this package.");
   console.log("- install writes AgentSkills files only.");
-  console.log("- install does not write API keys to local files.");
+  console.log("- install does not store API keys.");
   console.log("- install does not change MCP server configuration.");
   console.log("- install --dry-run previews destinations without writing files.");
   console.log("");
@@ -1713,7 +1780,9 @@ function printHelp() {
   console.log("      Call the Kuaishou creator works tool directly and print JSON.");
   console.log("");
   console.log(`  npx -y ${PACKAGE_SPEC} kuaishou user-posts --profile-url "<profile_url_or_share_text>" --pretty`);
-  console.log("      Call the Kuaishou creator works tool from a profile link or share text.");
+  console.log(
+    "      Call the Kuaishou creator works tool from a profile link or share text that resolves directly to a non-empty user_id."
+  );
   console.log("");
   console.log(`  npx -y ${PACKAGE_SPEC} weibo hot-search --pretty`);
   console.log("      Call the Weibo hot-search list tool directly and print JSON.");
@@ -1739,15 +1808,9 @@ function printHelp() {
   console.log(`  npx -y ${PACKAGE_SPEC} weibo likers --post-id "<post_id>" --pretty`);
   console.log("      Call the Weibo post liker list tool directly and print JSON.");
   console.log("");
-  console.log(`  npx -y ${PACKAGE_SPEC} weibo likers --post-url "<weibo_post_url_or_share_text>" --pretty`);
-  console.log("      Call the Weibo post liker list tool from a post link or share text.");
-  console.log("");
   console.log(`  npx -y ${PACKAGE_SPEC} weibo reposts --post-id "<post_id>" --pretty`);
   console.log("      Call the Weibo post repost list tool directly and print JSON.");
   console.log("");
-  console.log(`  npx -y ${PACKAGE_SPEC} weibo reposts --post-url "<weibo_post_url_or_share_text>" --pretty`);
-  console.log("      Call the Weibo post repost list tool from a post link or share text.");
-  console.log("");
   console.log(`  npx -y ${PACKAGE_SPEC} weibo user-info --user-id "<user_id>" --pretty`);
   console.log("      Call the Weibo creator profile tool directly and print JSON.");
   console.log("");
@@ -1876,8 +1939,6 @@ function printHelp() {
   console.log("  --sec-user-id <sec_user_id>");
   console.log("  --text <content>");
   console.log("      Text content for sensitive-check text.");
-  console.log("  --text-stdin");
-  console.log("      Read sensitive-check text from stdin instead of a shell argument.");
   console.log("  --platform <generic|xhs|douyin|kuaishou>");
   console.log("      Target platform for sensitive-check text; default is generic.");
   console.log("  --pages <number>");
@@ -1905,6 +1966,12 @@ function printHelp() {
   console.log("      Douyin content type filter; omit for all content types.");
   console.log("  --page-token <token>");
   console.log("      Continue token-paginated commands with the complete returned next_page_token. For search, omit it on the first request.");
+  console.log("  --source-client <slug>");
+  console.log("      Attribution client slug for authenticated direct CLI calls; defaults to socialdatax-skills.");
+  console.log("  --source-platform <slug>");
+  console.log("      Attribution marketplace/platform slug for the current Agent Skill, such as modelscope or skillhub.");
+  console.log("  --source-skill <slug>");
+  console.log("      Attribute authenticated direct CLI calls to the current Agent Skill usage slug.");
   console.log("  --sort-type <all|time_descending|collect_count_descending>");
   console.log("      WeChat Channels / 视频号 search sort; collect_count_descending means hottest first / most collected first; omit for default sort.");
   console.log("  --duration-range <all|under_5_min|between_5_and_20_min|over_20_min>");
@@ -1964,7 +2031,7 @@ async function runXhsDirectCommand(args) {
   }
   validateXhsDirectActionOptions(action, options);
 
-  const operation = buildXhsOperation(action, options);
+  const operation = attachDirectMetadata(buildXhsOperation(action, options), options);
   const data = shouldUsePaginatedDirectOutput(options)
     ? await callPaginatedDirectOperation(operation, options)
     : await callDirectOperation(operation);
@@ -1991,7 +2058,7 @@ async function runDouyinDirectCommand(args) {
   }
   validateDouyinDirectActionOptions(action, options);
 
-  const operation = buildDouyinOperation(action, options);
+  const operation = attachDirectMetadata(buildDouyinOperation(action, options), options);
   const data = shouldUsePaginatedDirectOutput(options)
     ? await callPaginatedDirectOperation(operation, options)
     : await callDirectOperation(operation);
@@ -2018,7 +2085,7 @@ async function runKuaishouDirectCommand(args) {
   }
   validateKuaishouDirectActionOptions(action, options);
 
-  const operation = buildKuaishouOperation(action, options);
+  const operation = attachDirectMetadata(buildKuaishouOperation(action, options), options);
   const data = shouldUsePaginatedDirectOutput(options)
     ? await callPaginatedDirectOperation(operation, options)
     : await callDirectOperation(operation);
@@ -2045,7 +2112,7 @@ async function runWeiboDirectCommand(args) {
   }
   validateWeiboDirectActionOptions(action, options);
 
-  const operation = buildWeiboOperation(action, options);
+  const operation = attachDirectMetadata(buildWeiboOperation(action, options), options);
   const data = shouldUsePaginatedDirectOutput(options)
     ? await callPaginatedDirectOperation(operation, options)
     : await callDirectOperation(operation);
@@ -2072,7 +2139,7 @@ async function runWechatDirectCommand(args) {
   }
   validateWechatDirectActionOptions(action, options);
 
-  const operation = buildWechatOperation(action, options);
+  const operation = attachDirectMetadata(buildWechatOperation(action, options), options);
   const data = shouldUsePaginatedDirectOutput(options)
     ? await callPaginatedDirectOperation(operation, options)
     : await callDirectOperation(operation);
@@ -2099,8 +2166,10 @@ async function runSensitiveCheckDirectCommand(args) {
   }
   validateSensitiveCheckDirectActionOptions(action, options);
 
-  const resolvedOptions = await resolveSensitiveCheckDirectOptions(action, options);
-  const operation = buildSensitiveCheckOperation(action, resolvedOptions);
+  const operation = attachDirectMetadata(
+    buildSensitiveCheckOperation(action, options),
+    options
+  );
   const data = await callDirectOperation(operation);
   const envelope = {
     platform: operation.platform.id,
@@ -2111,38 +2180,6 @@ async function runSensitiveCheckDirectCommand(args) {
   process.stdout.write("\n");
 }
 
-async function resolveSensitiveCheckDirectOptions(action, options) {
-  if (action !== "text") {
-    return options;
-  }
-  if (options.text !== undefined && options.textStdin !== undefined) {
-    throw new Error("Use only one of --text or --text-stdin for sensitive-check text.");
-  }
-  if (options.textStdin === undefined) {
-    return options;
-  }
-  const text = await readStdinText();
-  if (!text.trim()) {
-    throw new Error("Missing stdin text for --text-stdin.");
-  }
-  return {
-    ...options,
-    text,
-  };
-}
-
-async function readStdinText() {
-  if (process.stdin.isTTY) {
-    return "";
-  }
-  process.stdin.setEncoding("utf8");
-  let text = "";
-  for await (const chunk of process.stdin) {
-    text += chunk;
-  }
-  return text;
-}
-
 function buildXhsOperation(action, options) {
   switch (action) {
     case "hot-search":
@@ -2476,33 +2513,13 @@ function buildWeiboOperation(action, options) {
     case "likers":
       return buildDirectOperation(
         "likers",
-        buildOneOfCall(options, {
-          idOption: "postId",
-          urlOption: "postUrl",
-          idTool: "weibo_get_post_liker_list_by_post_id",
-          urlTool: "weibo_get_post_liker_list_by_post_url",
-          idArgument: "post_id",
-          urlArgument: "post_url",
-          idDisplay: "--post-id",
-          urlDisplay: "--post-url",
-          pageToken: options.pageToken,
-        }),
+        buildWeiboPostListByPostIdCall(options, "likers", "weibo_get_post_liker_list_by_post_id"),
         PLATFORMS.weibo
       );
     case "reposts":
       return buildDirectOperation(
         "reposts",
-        buildOneOfCall(options, {
-          idOption: "postId",
-          urlOption: "postUrl",
-          idTool: "weibo_get_post_repost_list_by_post_id",
-          urlTool: "weibo_get_post_repost_list_by_post_url",
-          idArgument: "post_id",
-          urlArgument: "post_url",
-          idDisplay: "--post-id",
-          urlDisplay: "--post-url",
-          pageToken: options.pageToken,
-        }),
+        buildWeiboPostListByPostIdCall(options, "reposts", "weibo_get_post_repost_list_by_post_id"),
         PLATFORMS.weibo
       );
     case "user-info":
@@ -2900,7 +2917,7 @@ function buildWechatSearchCall(options) {
 }
 
 function buildSensitiveCheckTextCall(options) {
-  if (typeof options.text !== "string" || !options.text.trim()) {
+  if (!options.text) {
     throw new Error("Missing --text for sensitive-check text.");
   }
   const platform = parseAllowedStringOption(
@@ -2978,6 +2995,22 @@ function buildWeiboRepliesCall(options) {
   };
 }
 
+function buildWeiboPostListByPostIdCall(options, action, tool) {
+  if (!options.postId) {
+    throw new Error(`Missing --post-id for weibo ${action}.`);
+  }
+  const toolArguments = {
+    post_id: options.postId,
+  };
+  if (options.pageToken) {
+    toolArguments.page_token = options.pageToken;
+  }
+  return {
+    tool,
+    toolArguments,
+  };
+}
+
 function buildWechatCommentsCall(options) {
   const hasObjectInput = Boolean(options.objectId || options.objectNonceId);
   const hasUrlInput = Boolean(options.url);
@@ -3499,6 +3532,9 @@ async function attachRepliesToCommentItems(operation, items, pageData) {
         operation.arguments,
         pageData
       );
+      repliesOperation.sourceAttribution = operation.sourceAttribution
+        ? { ...operation.sourceAttribution }
+        : undefined;
       const repliesData = await collectPaginatedDirectData(
         repliesOperation,
         { all: true, pages: undefined, maxItems: undefined },
@@ -3661,11 +3697,22 @@ async function callMcpBackend(operation) {
     { name: PACKAGE_NAME, version: PACKAGE_VERSION },
     { capabilities: {} }
   );
+  const headers = {
+    Authorization: `Bearer ${apiKey}`,
+  };
+  const sourceAttribution = operation.sourceAttribution || {};
+  if (sourceAttribution.sourceClient) {
+    headers[SOURCE_CLIENT_HEADER] = sourceAttribution.sourceClient;
+  }
+  if (sourceAttribution.sourcePlatform) {
+    headers[SOURCE_PLATFORM_HEADER] = sourceAttribution.sourcePlatform;
+  }
+  if (sourceAttribution.sourceSkill) {
+    headers[SOURCE_SKILL_HEADER] = sourceAttribution.sourceSkill;
+  }
   const transport = new StreamableHTTPClientTransport(new URL(upstreamUrl), {
     requestInit: {
-      headers: {
-        Authorization: `Bearer ${apiKey}`,
-      },
+      headers,
     },
   });