Weibo Keyword Search API
WarnAudited by ClawScan on May 10, 2026.
Overview
This is a narrow Weibo search API wrapper, but its documented command exposes the API token in command-line arguments, so it should be reviewed before use.
Before installing, confirm you trust the JustOneAPI integration and avoid running the documented `--token` command on shared machines or environments that record process arguments. Prefer a version that reads the token from a protected environment variable or secret store, and remember that your search terms and time window are sent to JustOneAPI.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Anyone with access to local process listings or logs could potentially capture the token and use the associated API account.
The documented invocation passes the API token as a command-line argument, which can be visible to local process inspection and may appear in shell or execution logs.
node {baseDir}/bin/run.mjs --operation "searchAllV2" --token "$JUST_ONE_API_TOKEN" --params-json ...Do not use the command as-is on shared or monitored systems; prefer a helper that reads `JUST_ONE_API_TOKEN` directly from the environment or a secret manager, and rotate the token if it may have been exposed.
Your Weibo keyword, date range, and related filters are sent to JustOneAPI, which is expected for this skill but should be understood before use.
The helper builds a request to the configured external JustOneAPI endpoint and sends the user-provided search parameters.
const url = new URL(operation.path, ensureBaseUrl(baseUrl)); ... response = await fetch(url, requestInit);
Use it only for searches and parameters you are comfortable sending to JustOneAPI, and verify the endpoint before invoking it.