mrkeyoor.com_
Fri 25 Sept 19:58 UTC
AI Toolsevaluationupdated 26 Aug 2026

baoyu-skills review

Baoyu Skills is a collection of more than 20 agent skills for making images, diagrams, slides, formatted articles, translations, and social posts. It gives Claude Code, Codex, and other file-capable agents repeatable publishing workflows. The main README is English, and Chinese documentation is also available.

+121stars / 7d
Verdict

Our Baoyu Skills run passed 234 of 236 tests and reported 7 high-severity dependency findings, so it is useful publishing automation that still needs an install review. Choose a few skills for one defined workflow, inspect their instructions, and keep human approval before public posting. It fits visual explainers and WeChat work well, but it is not a hands-off content factory.

We ran it

Lab card: what happened when we ran baoyu-skillsScreenshot of baoyu-skills (github.com/JimLiu/baoyu-skills)
Install✓ · 60s328 packages · 200 MB
Buildn/ano build script
Tests✗ · 29s234 passed · 2 failed of 236 (node:test)
Known vulns80 critical · 7 high · 0 moderate · 1 low (npm audit)
Repo835 files~60,435 lines of source · 23.5 MB · 2 CI workflows

Answers from our run

Does baoyu-skills build from source?

Dependencies installed in 60 seconds (328 packages), and the project has no separate build step. We cloned commit 6b7a2e4 into a clean Debian container with 3 CPUs and no project-specific setup.

Do baoyu-skills's tests pass?

Not all of them: 234 of 236 passed and 2 failed when we ran the project's own test command (node:test). Some failures need services or credentials a bare container does not have.

Does baoyu-skills have known vulnerabilities in its dependencies?

npm audit flagged 8 known advisories in the dependency tree at the time of our run.

Who should not use baoyu-skills?

Users who want one small plugin: the README warns that installing all 20-plus skills adds context overhead.

What are the alternatives to baoyu-skills?

Anthropic Skills, Everything Claude Code, Superpowers. Our Baoyu Skills run passed 234 of 236 tests and reported 7 high-severity dependency findings, so it is useful publishing automation that still needs an install review.

Setup3/5Easy registration; providers and publishing need configuration
Docs5/5Extensive examples, previews, credential scopes, and workflows
Community4/525,339 stars and current issue activity around real workflows
Maturity3/5234 tests passed, but 2 failed and browser flows remain fragile

Who it’s for

Writers and developer-marketers turning one draft into covers, illustrations, slides, diagrams, and platform-ready posts.
Claude Code or Codex users who prefer inspectable skills over a closed content service.
Teams publishing to WeChat, Weibo, or X that can manage browser sessions and credentials locally.
Multilingual publishers who need repeatable article translation and formatting instructions.

Who it’s NOT for

Users who want one small plugin: the README warns that installing all 20-plus skills adds context overhead.
Teams unwilling to manage outside services or secrets: image generation may need provider keys, while WeChat API publishing needs an AppID, AppSecret, and allowlisted IP.
Publishers who need unattended browser posting to be dependable: issue 197 reports stale editor nodes, unfinished image uploads, and draft-save failures.
Documentation teams that require light or monochrome diagrams: issue 196 asks for those themes because the current dark output does not fit that work.
Subtitle teams that need translated speech to preserve duration: issue 193 requests that missing behavior.

Setup reality

Our Node 22 sandbox installed 328 packages in 60 seconds and used 200 MB on disk. There was no build script or target. Tests ran for 29 seconds: 234 passed and 2 failed out of 236; npm audit reported 8 known vulnerabilities, including 7 high-severity findings.

The README requires Node.js and the ability to run npx bun. Image skills may need a provider, while publishing skills can require Chrome, logins, API credentials, IP allowlisting, or an SSH route. Project credentials belong in .baoyu-skills/.env and must not be committed.

The 23.5 MB checkout contained 835 files and about 60,435 lines of source. It has 2 CI workflows, workspaces, no Dockerfile, and no tests directory even though a test script ran. Install only the skill directories needed for the job.

More than 20 skills cover publishing and visual work

Baoyu Skills packages repeatable workflows for AI agents. The collection covers Xiaohongshu cards, infographics, SVG diagrams, cover art, slide decks, comics, article illustrations, translations, Markdown cleanup, HTML conversion, image compression, transcripts, and social posting. Many entries contain scripts, references, configuration rules, and checks around generated output. The repository targets Claude Code, Codex, Cursor, and other agents that can read files and run commands.

A writer can pass an article through a cover skill, add illustrations, convert it to WeChat-ready HTML, then stage it for publishing. A developer can install only the diagram skill and ask Claude to write a self-contained SVG. Named skills save the procedure that would otherwise be repeated in a long prompt. They do not supply provider accounts or guarantee the quality of the final artifact.

What happened when we ran it

Our run cloned commit 6b7a2e4 into an unprivileged Node 22 Bookworm container with 3 CPUs, 8 GB of RAM, and no secrets. The checkout contained 835 files, about 60,435 lines of source, and occupied 23.5 MB. Bun installed 328 packages in 60 seconds and used 200 MB on disk. The repository exposed no build script or target, so no build ran.

The test script finished with exit code 1 after 29 seconds. Node's runner reported 236 tests: 234 passed and 2 failed. The log tail only contained aggregate counts and error: script "test" exited with code 1; it did not name the failed cases or their causes. npm audit found 8 known vulnerabilities, comprising 7 high-severity findings and 1 low-severity finding.

The repository has 2 CI workflow files, workspaces, no Dockerfile, and no tests directory. A test script clearly exists despite that directory signal. Before adopting commit 6b7a2e4, inspect the complete failure output and the 7 high-severity advisories. Our measurements do not show whether either failed case affects the skill selected for use.

Selective installation avoids permanent context cost

The README lists Node.js and the ability to run npx bun as prerequisites, then offers npx skills add jimliu/baoyu-skills. Claude's plugin marketplace and project-level Codex directories are documented too. ClawHub installs skills individually. The README warns that loading the whole collection adds unnecessary context on every agent run, advice that should be treated as the default installation policy.

Codex users can copy full skill directories into .agents/skills for one project. The WeChat example recommends only the cover, illustration, and posting skills, since the posting skill already includes Markdown conversion. That kind of minimal bundle is easier to review and version. Credentials can be scoped to a project through .baoyu-skills/.env; the README explicitly says not to commit that file.

Visual options are specific enough to repeat

The infographic skill names information structures such as funnels, comparison tables, timelines, and priority quadrants, then pairs them with documented visual treatments. The cover generator separates type, palette, rendering, text, and mood. Xiaohongshu cards have their own style and density controls. Preview grids let a user choose a direction before spending a provider request.

The diagram skill is different because Claude writes SVG code directly instead of calling an image model. It supports flowchart, sequence, structural, illustrative, and class diagrams, with an embedded style for dark mode. Issue 196 asks for light and monochrome themes because dark output does not suit some professional documentation. The request was still open when checked, so teams with strict brand templates should inspect generated SVG or maintain their own theme rules.

WeChat automation keeps a necessary approval step

The social skills make a sound safety choice: X and Weibo browser flows fill the editor but leave final publishing to the user. WeChat supports API, browser, and remote API methods. Its API route needs credentials and an allowlisted IP. Browser mode keeps a QR-login session, while a remote route can use an SSH SOCKS5 tunnel. Each path has a different secret and failure model.

Issue 197 describes hidden or stale nodes in the newer WeChat editor that can break menu, editor, or save-button selection. It also reports saves occurring before image uploads finish on slow networks. The author of the report had 8 local tests passing for a proposed patch, but the upstream issue remained open. Keep the manual checkpoint, inspect every uploaded image, and confirm the draft exists before treating a run as successful.

Release 2.5.2 fixed false image reuse evidence

Version 2.5.2 arrived on June 18, 2026. Its main fix stopped a Codex image-generation path from accepting an unrelated existing image as evidence that a new image tool call occurred. That is a meaningful correction because a successful-looking file was not proof of the requested action. The same release documented project-level Codex installation and user-versus-project WeChat credential scopes.

GitHub recorded a last push on July 4, 2026, 25,339 stars, and 17 open issues and pull requests combined. Those figures show strong attention and recent maintenance, while the 2 failing tests and browser-editor report keep the maturity score grounded. A wide collection must follow changes across model providers, agent clients, and social platforms that move independently.

Baoyu Skills works best as a shelf of inspectable tools. Our 60-second install and 234 passing tests make it credible to trial, but 7 high-severity audit findings deserve resolution before a sensitive workstation install. Select one workflow, pin the files, test the generated artifact, and require a person to approve anything headed to a public account.

Alternatives

ProjectWhat it isPick it when
Anthropic Skills gh↗Anthropic's public reusable skills for document, presentation, spreadsheet, and PDF work.pick this instead when you want an official reference set or office-document workflows.
Everything Claude Code gh↗A broad Claude Code configuration system covering skills, memory, security, and development workflows.pick this instead when the whole coding-agent environment matters more than visual publishing.
Superpowers gh↗An agent skill system centered on disciplined software-development methods.pick this instead when the job is planning, testing, and implementing software.

What people are saying

  1. [github-trending] JimLiu/baoyu-skills

Sources

  1. Baoyu Skills README
  2. Baoyu Skills v2.5.2 release
  3. WeChat browser publishing issue
  4. Diagram light theme request
  5. Subtitle duration request

More ai tools reviews

nobodywho · desktop-cc-gui · langextract · openrig · skills · awesome-grokbot · the whole board →