Back to Directory/Documentation

HaoyouBox Publish

Publish local HTML or Markdown as expiring password-protected HaoyouBox links.

DocumentationJavaScriptv1.0.0

HaoyouBox Agent Skill

中文说明

Publish one local HTML or Markdown file to HaoyouBox from a compatible AI agent. The Skill creates an expiring, password-protected browser link and returns the complete link, visible password, and actual expiry.

This repository contains the open Agent Skill and its documentation. The hosted HaoyouBox service and server source are not part of this repository.

Install

Codex, Claude Code, Cursor, and other supported agents

Use the cross-agent Skills installer:

npx skills add cheng-big/haoyoubox-agent-skill --skill haoyoubox-publish -g

Review the Skill before you approve installation. Restart or reload your agent if it does not discover the Skill immediately.

Gemini CLI

gemini skills install https://github.com/cheng-big/haoyoubox-agent-skill --path skills/haoyoubox-publish

Gemini CLI asks for installation consent. Use /skills list after installation to confirm that haoyoubox-publish is enabled.

Manual installation

Copy the skills/haoyoubox-publish directory into a Skill location supported by your agent, such as ~/.agents/skills/haoyoubox-publish.

The current hosted copy remains available at haoyoubox.com/agent/SKILL.md.

Use

Ask your agent:

Publish report.html to HaoyouBox and create a password-protected link that expires in 24 hours. Use English for the receiver page. Return the complete link, password, and actual expiry together.

For a Chinese receiver page:

把 report.html 发布到好友盒,生成 24 小时密码保护链接。接收页使用中文。请一起返回完整链接、密码和实际到期时间。

On first use, the agent opens a HaoyouBox device approval flow. You sign in to HaoyouBox and approve the device. The agent then stores the publish token in its private credential store.

What It Publishes

  • One explicit .html, .htm, .md, or .markdown file.
  • A fixed browser-ready version on HaoyouBox.
  • A password-protected link with a server-enforced expiry.
  • A Chinese or English receiver interface.

The Skill does not upload directories, ZIP files, hidden files, environment files, keys, symlinks, or an entire workspace. It does not read upload history, delete pages, revoke links, or manage accounts.

Security

  • Review the Skill before installation.
  • Device approval always requires an explicit user action.
  • The publish token must stay in the agent's private credential store.
  • The raw share password is derived locally. HaoyouBox receives a salt and verifier, not the raw password.
  • The complete share link includes the password for convenient prefill. Treat the complete link as one sensitive access credential.
  • Do not publish files that contain secrets, personal data, private keys, or environment variables.

See SECURITY.md for vulnerability reporting and token-response steps.

Product

Recipients open the generated link in a browser. They do not need to install this Skill or create a HaoyouBox account.

Contributing

See CONTRIBUTING.md. Run npm test before opening a pull request.

License

The files in this repository are licensed under the Apache License 2.0. Use of the hosted HaoyouBox service remains subject to the product's published terms and policies.

Installation

Source-derived launch command. Check the maintainer’s required arguments and credentials before running:

bash
npx -y haoyoubox-mcp

Set up in your AI client

Merge this template into ~/Library/Application Support/Claude/claude_desktop_config.json. Keep existing servers. Add any arguments, credentials, and permissions required by the maintainer; this template has not been install-tested.

json
{
  "mcpServers": {
    "com-haoyoubox-publish": {
      "command": "npx",
      "args": [
        "-y",
        "haoyoubox-mcp"
      ]
    }
  }
}

Restart Claude Desktop completely for changes to take effect. Confirm the server appears connected in the client’s tool list, then try a read-only example from its documentation.

Claude Desktop setup reference

Package

haoyoubox-mcpnpm

Compatible MCP Clients

HaoyouBox Publish works with any MCP-compatible client. Copy the config snippet from the Configuration section above and add it to the file shown for your client, then restart the application.

  • Claude Desktop~/Library/Application Support/Claude/claude_desktop_config.jsonRestart Claude Desktop completely for changes to take effect.
  • Cursor~/.cursor/mcp.jsonRestart Cursor for changes to take effect.
  • VS Code.vscode/mcp.jsonReload VS Code window for changes to take effect.
  • Windsurf~/.codeium/windsurf/mcp_config.jsonRestart Windsurf for changes to take effect.
  • Claude Code.mcp.jsonSave at the project root, then start Claude Code in that project and review the MCP server approval prompt. Keep real credentials out of shared files.

Learn More