ClawHub

Weibo CLI

v0.1.1

Query Weibo (微博) public data via CLI. Use when user asks about: - Weibo hot searches / trending topics (微博热搜) - Searching Weibo posts, users, or topics - Get...

⭐ 1· 632·2 current·3 all-time
bym3@marvae
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
medium confidence
✓
Purpose & Capability
Name/description (querying Weibo public data, hot searches, posts, users) matches the runtime instructions which show usage of a weibo CLI and example commands. The requested functionality is coherent with the stated purpose.
ℹ
Instruction Scope
SKILL.md is instruction-only and stays within scope (commands to install and use the CLI, examples for search/hot/user/post). It references an optional WEIBO_COOKIE env var for higher rate limits (not required) and suggests parsing output with jq. There are no instructions to read arbitrary user files or unrelated system configuration.
ℹ
Install Mechanism
No install spec in metadata (skill is instruction-only), but the README tells users to npm install or npx @marvae24/weibo-cli. Installing a third-party npm package is a reasonable way to get a CLI but carries normal npm risks: the package runs code from the registry. Recommend using npx or a local install and reviewing the package source before global install.
ℹ
Credentials
The skill declares no required environment variables. SKILL.md mentions an optional WEIBO_COOKIE for higher rate limits; that is consistent with the tool's purpose but is sensitive (user login cookie). No other credentials or unrelated secrets are requested.
✓
Persistence & Privilege
Skill does not request persistent/always-on presence (always: false) and does not instruct modifying other skills or system-wide agent settings. Autonomous invocation defaults are normal.
Assessment
This skill appears coherent, but it instructs you to install an external npm package (@marvae24/weibo-cli). Before installing: (1) inspect the package repository or npm page and prefer npx or a local install over a global -g install; (2) do not paste or store your Weibo login cookie (WEIBO_COOKIE) unless you fully trust the package publisher; (3) run the CLI in a sandbox or container if you want to limit risk. If you need higher assurance, ask the publisher for the source repo and review code before use.

Like a lobster shell, security has layers — review code before you run it.

latestvk979xtqs86wwh9790prc5wqwn182wgtm

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments