Douban Sync

v0.2.2

Export and sync Douban (豆瓣) book/movie/music/game collections to local CSV files (Obsidian-compatible). Use when the user wants to export their Douban readin...

2· 1.1k·2 current·2 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
The name/description match the code and behavior: scripts scrape Douban pages, parse the user's Douban RSS, migrate markdown to CSV, and write CSV files. One minor mismatch: the registry metadata lists no required binaries, but the included scripts are Node.js programs (and one script uses puppeteer-core and requires a running browser remote-debugging endpoint). The skill does not declare Node/puppeteer or a browser requirement in metadata.
Instruction Scope
SKILL.md instructs the agent to run included scripts and to supply DOUBAN_USER; the scripts only fetch Douban pages/RSS and read/write files under the configured output directory. The full-export browser mode requires the user to be logged into Douban and to run/allow a browser remote debugging endpoint; RSS mode does not require login. No instructions ask for unrelated files or secrets.
Install Mechanism
There is no install spec (instruction-only), so nothing would be automatically downloaded or installed by the installer. However, runtime dependencies (Node.js, and for browser scraping puppeteer-core plus a browser with remote-debugging enabled) are required but not declared — the skill will fail rather than install anything if those are missing.
Credentials
Only DOUBAN_USER is required (primary credential). Optional env vars used by the code (DOUBAN_OUTPUT_DIR, BROWSER_URL, STATE_FILE) are reasonable and not secrets. No other credentials or unrelated environment variables are requested.
Persistence & Privilege
always is false and the skill does not request persistent platform privileges. It writes CSV output and a small state file under the user's configured output directory (default ~/douban-sync/{user}) and will create that directory. It does not modify other skills or system settings.
Assessment
This skill appears to do exactly what it claims: export Douban collections to CSV and incrementally sync via Douban RSS. Before running it, note the following: (1) You need a Node.js runtime to run the scripts; the repository imports puppeteer-core for the browser scraper and expects either puppeteer dependencies or a running browser reachable at BROWSER_URL (default http://127.0.0.1:18800). These runtime dependencies are not installed automatically. (2) The browser-based full export requires you to be logged into Douban in that browser; enabling a browser remote-debugging port can expose your browser to local/remote connections — only use it on a machine you control. (3) The scripts will create and write CSV files and a .douban-rss-state.json in the output directory (default ~/douban-sync); migrate-md-to-csv will read Markdown files from that same directory. Review the scripts if you want to confirm exact behavior. (4) If you prefer a lower-privilege option, run the RSS sync (node scripts/douban-rss-sync.mjs) which does not require login. If you plan to run the browser scraper, ensure Node and required packages are installed in a safe environment and do not expose the Chrome remote debugging port to untrusted networks.

Like a lobster shell, security has layers — review code before you run it.

latestvk97axdzhkjrracfex7c5amhp21816g43

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

Runtime requirements

EnvDOUBAN_USER
Primary envDOUBAN_USER

Comments