Weread Reading Recommender
v1.0.1Use this skill when the user wants to export local WeRead records, normalize WeRead data, analyze reading preferences from WeRead history, or get book recomm...
⭐ 0· 135·0 current·0 all-time
by@cengsin
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description match the delivered assets. The repo contains exporter and normalizer scripts that operate on a WeRead cookie and call weread.qq.com endpoints — exactly what a WeRead export/recommendation skill would need. There are no unrelated credentials or services requested.
Instruction Scope
SKILL.md instructs the agent to check for a local cookie, run the provided export and normalize scripts, and then reason from the normalized JSON. The scripts access only local cookie sources and the official weread.qq.com endpoints; they do not read other system files or send data to unexpected endpoints. The SKILL.md also contains explicit privacy rules (do not write or echo the cookie).
Install Mechanism
No install spec is provided (instruction-only plus two local scripts). Nothing will be downloaded or installed from third-party URLs, so there is low install-time risk.
Credentials
The only sensitive input the skill uses is a WeRead cookie (via --cookie, --cookie-file, or env var like WEREAD_COOKIE). No other secrets or unrelated environment variables are requested. The cookie request is proportional to the stated functionality, but users should recognize the cookie is an authentication credential and handle it cautiously.
Persistence & Privilege
Skill is not always-enabled, does not request elevated system persistence, and there is no code that modifies other skills or global agent configs. Autonomous invocation is allowed (platform default) but does not combine with other high-risk behaviors here.
Assessment
This skill appears coherent and local-first. Before installing or running it: (1) review the two Python scripts yourself (they are included) and run them in a safe environment; (2) only provide your WeRead cookie locally (prefer --cookie-file or an env var), and never paste it into public chat or remote storage; (3) note that the exporter makes HTTPS requests to weread.qq.com (expected) — if you are uncomfortable providing a live cookie, you can run the normalizer against the provided sample raw JSON instead; (4) verify outputs do not contain the cookie (SKILL.md states this and the scripts are written not to include it); and (5) run the scripts with network access blocked if you only want to test normalization on sample data.Like a lobster shell, security has layers — review code before you run it.
latestvk977ja9g5gmj7w43fpky2yd2fh837h18
License
MIT-0
Free to use, modify, and redistribute. No attribution required.