ClawHub

Weeko

v1.4.0

Weeko CLI commands for bookmark management. Search, add, update, delete bookmarks. Create and organize groups. Batch operations.

⭐ 0· 108·0 current·0 all-time
bySilas@occupy5
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
Capability signals
Requires sensitive credentials
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description match the content: SKILL.md and README describe invoking the Weeko CLI to search/add/update/delete bookmarks and manage groups. Declared prerequisites (Bun runtime, weeko-cli, Weeko API key) are exactly what this capability needs and nothing unrelated (no cloud credentials, no unrelated system access).
✓
Instruction Scope
Runtime instructions are limited to using the weeko CLI (login, whoami, status, list, add, update, delete, group commands, batch ops) and describe config location (~/.config/weeko-cli/config.json) and environment overrides (WEEKO_API_KEY, WEEKO_API_URL). The instructions do not direct reading unrelated files, collecting unexpected secrets, or posting data to endpoints other than the Weeko API.
✓
Install Mechanism
No install spec is embedded in the skill (instruction-only). The docs recommend installing weeko-cli via bun install -g weeko-cli and Bun from bun.sh — both are standard distribution routes. The skill itself does not download or extract arbitrary archives or point to untrusted URLs.
✓
Credentials
No required environment variables or credentials are declared by the skill; SKILL.md documents an expected Weeko API key (WEEKO_API_KEY or login with keys prefixed wk_), which is proportional to the described API-based functionality. No unrelated secrets or multiple unrelated credentials are requested.
✓
Persistence & Privilege
always is false and the skill is user-invocable; it does not request permanent presence or attempt to modify other skills or system-wide agent settings. Configuration storage is limited to the Weeko CLI config path (~/.config/weeko-cli/), which is consistent with the tool's purpose.
Assessment
This skill is an instruction-only wrapper for the Weeko CLI and appears internally consistent. Before installing or using it: (1) verify you install weeko-cli from the official package (npm registry) and Bun from the official site, (2) keep your Weeko API key secret (do not paste it into public chats or repos), and (3) be aware that enabling an agent that can run shell commands gives it the ability to access files and environment variables on your machine — only grant that capability to agents you trust. If you need higher assurance, inspect the actual weeko-cli package source published to npm/github before use.

Like a lobster shell, security has layers — review code before you run it.

latestvk97845frkj24stkmq8kzkswgvx84y44b

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments