HaoyouBox Publish
Publish local HTML or Markdown as expiring password-protected HaoyouBox links.
التثبيت
أضف هذا إلى إعدادات MCP في عميلك (Claude Desktop: claude_desktop_config.json، وCursor: .cursor/mcp.json، ويستخدم VS Code وغيره الصيغة نفسها «mcpServers»).
haoyoubox-mcpclaude mcp add haoyoubox-publish -e 'HAOYOUBOX_TOKEN=<your haoyoubox_token>' -- npx -y haoyoubox-mcp@1.0.0
{
"mcpServers": {
"haoyoubox-publish": {
"command": "npx",
"args": [
"-y",
"haoyoubox-mcp@1.0.0"
],
"env": {
"HAOYOUBOX_TOKEN": "<your haoyoubox_token>"
}
}
}
}
متغيرات البيئة
HAOYOUBOX_TOKENسري Optional publish-only HaoyouBox Agent token
التوثيق
مأخوذ من ملف README للمشروع على GitHub ويُحدَّث أسبوعيًا. تفتح الروابط على GitHub.
HaoyouBox Agent Skill
Publish one local HTML or Markdown file to HaoyouBox from a compatible AI agent. The Skill creates an expiring, password-protected browser link and returns the complete link, visible password, and actual expiry.
This repository contains the open Agent Skill and its documentation. The hosted HaoyouBox service and server source are not part of this repository.
Install
Codex, Claude Code, Cursor, and other supported agents
Use the cross-agent Skills installer:
npx skills add cheng-big/haoyoubox-agent-skill --skill haoyoubox-publish -g
Review the Skill before you approve installation. Restart or reload your agent if it does not discover the Skill immediately.
Gemini CLI
gemini skills install https://github.com/cheng-big/haoyoubox-agent-skill --path skills/haoyoubox-publish
Gemini CLI asks for installation consent. Use /skills list after installation to confirm that haoyoubox-publish is enabled.
Manual installation
Copy the skills/haoyoubox-publish directory into a Skill location supported by your agent, such as ~/.agents/skills/haoyoubox-publish.
The current hosted copy remains available at haoyoubox.com/agent/SKILL.md.
Use
Ask your agent:
Publish report.html to HaoyouBox and create a password-protected link that expires in 24 hours. Use English for the receiver page. Return the complete link, password, and actual expiry together.
For a Chinese receiver page:
把 report.html 发布到好友盒,生成 24 小时密码保护链接。接收页使用中文。请一起返回完整链接、密码和实际到期时间。
On first use, the agent opens a HaoyouBox device approval flow. You sign in to HaoyouBox and approve the device. The agent then stores the publish token in its private credential store.
What It Publishes
- One explicit
.html,.htm,.md, or.markdownfile. - A fixed browser-ready version on HaoyouBox.
- A password-protected link with a server-enforced expiry.
- A Chinese or English receiver interface.
The Skill does not upload directories, ZIP files, hidden files, environment files, keys, symlinks, or an entire workspace. It does not read upload history, delete pages, revoke links, or manage accounts.
Security
- Review the Skill before installation.
- Device approval always requires an explicit user action.
- The publish token must stay in the agent's private credential store.
- The raw share password is derived locally. HaoyouBox receives a salt and verifier, not the raw password.
- The complete share link includes the password for convenient prefill. Treat the complete link as one sensitive access credential.
- Do not publish files that contain secrets, personal data, private keys, or environment variables.
See SECURITY.md for vulnerability reporting and token-response steps.
Product
Recipients open the generated link in a browser. They do not need to install this Skill or create a HaoyouBox account.
Contributing
See CONTRIBUTING.md. Run npm test before opening a pull request.
License
The files in this repository are licensed under the Apache License 2.0. Use of the hosted HaoyouBox service remains subject to the product's published terms and policies.
الأسئلة الشائعة
ما هو HaoyouBox Publish؟
Publish local HTML or Markdown as expiring password-protected HaoyouBox links.
كيف أثبّت HaoyouBox Publish؟
يعمل على جهازك. في Claude Code: claude mcp add haoyoubox-publish -e 'HAOYOUBOX_TOKEN=<your haoyoubox_token>' -- npx -y haoyoubox-mcp@1.0.0. وفي العملاء الآخرين، الصق إعداد JSON من هذه الصفحة في إعدادات MCP الخاصة بهم.
هل يحتاج HaoyouBox Publish إلى مفتاح API؟
نعم. يتطلب HAOYOUBOX_TOKEN، وتضبطها في إعداداته.
هل HaoyouBox Publish مفتوح المصدر؟
نعم. شيفرته متاحة على GitHub بترخيص Apache-2.0.
من يصون HaoyouBox Publish؟
ينشره cheng-big. يدرجه AI.tn لكنه لا يصونه ولا يوصي به.
من سجل MCP الرسمي. الإدراج ليس توصية: راجع شيفرة الخادم وصلاحياته قبل منحه الوصول إلى بياناتك.