Xiaohongshu Image Card Series Generator

The skill constructs file paths and names using dynamically generated slugs from user content. Insufficient sanitization of these inputs could lead to command injection or path traversal vulnerabilities when performing file system operations or executing shell commands.

Slug Generation: Extract main topic from content (2-4 words, kebab-case)
xhs-images/{topic-slug}/
test -f .baoyu-skills/baoyu-xhs-images/EXTEND.md
Save source content
Save prompt to prompts/NN-{type}-[slug].md

The skill constructs prompts for an external image generation skill, incorporating dynamic and potentially user-controlled elements like watermarks. This creates a vector for an attacker to inject malicious instructions into the downstream image generation process.

Add to each image generation prompt: Include a subtle watermark "[content]" positioned at [position].
Image Generation Skill Selection

The skill uses `EXTEND.md` to store user preferences and custom configurations, checking for its existence in various user and project directories. If an attacker can write to this file, they could persistently alter the skill's behavior or inject malicious configurations that are loaded on subsequent runs.

EXTEND.md Supports: Watermark | Preferred style/layout | Custom style definitions | Language preference
Save EXTEND.md
test -f .baoyu-skills/baoyu-xhs-images/EXTEND.md