HaoyouBox Publish
Publish local HTML or Markdown as expiring password-protected HaoyouBox links.
Installation
Ajoutez ceci à la configuration MCP de votre client (Claude Desktop : claude_desktop_config.json ; Cursor : .cursor/mcp.json ; VS Code et les autres utilisent la même forme « mcpServers »).
haoyoubox-mcpclaude mcp add haoyoubox-publish -e 'HAOYOUBOX_TOKEN=<your haoyoubox_token>' -- npx -y haoyoubox-mcp@1.0.0
{
"mcpServers": {
"haoyoubox-publish": {
"command": "npx",
"args": [
"-y",
"haoyoubox-mcp@1.0.0"
],
"env": {
"HAOYOUBOX_TOKEN": "<your haoyoubox_token>"
}
}
}
}
Variables d'environnement
HAOYOUBOX_TOKENsecret Optional publish-only HaoyouBox Agent token
Documentation
Tirée du README du projet sur GitHub, actualisée chaque semaine. Les liens ouvrent GitHub.
HaoyouBox Agent Skill
Publish one local HTML or Markdown file to HaoyouBox from a compatible AI agent. The Skill creates an expiring, password-protected browser link and returns the complete link, visible password, and actual expiry.
This repository contains the open Agent Skill and its documentation. The hosted HaoyouBox service and server source are not part of this repository.
Install
Codex, Claude Code, Cursor, and other supported agents
Use the cross-agent Skills installer:
npx skills add cheng-big/haoyoubox-agent-skill --skill haoyoubox-publish -g
Review the Skill before you approve installation. Restart or reload your agent if it does not discover the Skill immediately.
Gemini CLI
gemini skills install https://github.com/cheng-big/haoyoubox-agent-skill --path skills/haoyoubox-publish
Gemini CLI asks for installation consent. Use /skills list after installation to confirm that haoyoubox-publish is enabled.
Manual installation
Copy the skills/haoyoubox-publish directory into a Skill location supported by your agent, such as ~/.agents/skills/haoyoubox-publish.
The current hosted copy remains available at haoyoubox.com/agent/SKILL.md.
Use
Ask your agent:
Publish report.html to HaoyouBox and create a password-protected link that expires in 24 hours. Use English for the receiver page. Return the complete link, password, and actual expiry together.
For a Chinese receiver page:
把 report.html 发布到好友盒,生成 24 小时密码保护链接。接收页使用中文。请一起返回完整链接、密码和实际到期时间。
On first use, the agent opens a HaoyouBox device approval flow. You sign in to HaoyouBox and approve the device. The agent then stores the publish token in its private credential store.
What It Publishes
- One explicit
.html,.htm,.md, or.markdownfile. - A fixed browser-ready version on HaoyouBox.
- A password-protected link with a server-enforced expiry.
- A Chinese or English receiver interface.
The Skill does not upload directories, ZIP files, hidden files, environment files, keys, symlinks, or an entire workspace. It does not read upload history, delete pages, revoke links, or manage accounts.
Security
- Review the Skill before installation.
- Device approval always requires an explicit user action.
- The publish token must stay in the agent's private credential store.
- The raw share password is derived locally. HaoyouBox receives a salt and verifier, not the raw password.
- The complete share link includes the password for convenient prefill. Treat the complete link as one sensitive access credential.
- Do not publish files that contain secrets, personal data, private keys, or environment variables.
See SECURITY.md for vulnerability reporting and token-response steps.
Product
Recipients open the generated link in a browser. They do not need to install this Skill or create a HaoyouBox account.
Contributing
See CONTRIBUTING.md. Run npm test before opening a pull request.
License
The files in this repository are licensed under the Apache License 2.0. Use of the hosted HaoyouBox service remains subject to the product's published terms and policies.
Questions fréquentes
Qu'est-ce que HaoyouBox Publish ?
Publish local HTML or Markdown as expiring password-protected HaoyouBox links.
Comment installer HaoyouBox Publish ?
Il s'exécute sur votre machine. Dans Claude Code : claude mcp add haoyoubox-publish -e 'HAOYOUBOX_TOKEN=<your haoyoubox_token>' -- npx -y haoyoubox-mcp@1.0.0. Pour les autres clients, collez la configuration JSON de cette page dans leurs réglages MCP.
Faut-il une clé API pour HaoyouBox Publish ?
Oui. Il attend HAOYOUBOX_TOKEN, à renseigner dans sa configuration.
HaoyouBox Publish est-il open source ?
Oui. Son code est sur GitHub sous licence Apache-2.0.
Qui maintient HaoyouBox Publish ?
Il est publié par cheng-big. AI.tn le référence sans le maintenir ni le recommander.
Issu du registre MCP officiel. Être listé n'est pas une recommandation : vérifiez le code et les permissions d'un serveur avant de lui donner accès à vos données.