Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

opencli

v1.0.1

Fetch data from social, video, and news websites using OpenCLI by reusing Chrome login sessions without API keys.

0· 193·1 current·1 all-time
by张贝@hellotombruce

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for hellotombruce/opencli-skills.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "opencli" (hellotombruce/opencli-skills) from ClawHub.
Skill page: https://clawhub.ai/hellotombruce/opencli-skills
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install opencli-skills

ClawHub CLI

Package manager switcher

npx clawhub@latest install opencli-skills
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
The name/description (fetch website data by reusing Chrome login sessions) aligns with the SKILL.md: it instructs using @jackwener/opencli + Browser Bridge and lists many site-specific commands. However the command set includes active actions (send messages, control desktop chat apps, download video) in addition to read-only fetches; that breadth is larger than the simple 'fetch data' description suggests.
!
Instruction Scope
Runtime instructions instruct dumping DOM, reading chat messages, sending messages, and interacting with desktop/web app UIs via the Browser Bridge — operations that can access and exfiltrate authenticated/private content. The skill expects reuse of Chrome sessions (i.e., access to cookies/session state) which is functionally necessary for its purpose but also grants broad access to any logged-in sites. The SKILL.md does not place clear limits or safeguards on these powerful operations.
Install Mechanism
This is an instruction-only skill (no install spec in the registry). It tells users to run `npm install -g @jackwener/opencli` and to install the Browser Bridge Chrome extension. Installing a global npm package and a browser extension is a typical path for this functionality but carries risk (supply-chain/browser extension permissions). The SKILL.md also references additional runtime tooling (e.g., yt-dlp for downloads) that is not formalized in the metadata.
!
Credentials
The skill requests no environment variables or credentials, but its operation depends on accessing your Chrome login sessions via a browser extension — effectively granting access to your authenticated accounts. That access is proportionate to scraping account-scoped data, but the SKILL.md does not enumerate or limit which sites, nor does it require explicit per-site consent in the instructions. Also, some commands mention external binaries (yt-dlp) which are not declared in the top-level requirements.
Persistence & Privilege
The skill is not always-enabled and does not request elevated platform-level persistence; it is instruction-only and would operate only when invoked. It also does not declare modifications to other skills or system-wide config.
What to consider before installing
This skill is coherent with its stated goal (scraping sites by reusing your Chrome session) but that same mechanism gives it potential access to all data in any logged-in browser session. Before installing: (1) verify the npm package and author (@jackwener/opencli) — review the package source/release on npm/GitHub; (2) review the Browser Bridge extension's permissions and provenance; (3) avoid using this with highly sensitive accounts or run it in a dedicated browser profile with only the accounts you intend to expose; (4) be aware some commands perform write actions (send messages, downloads) and additional tools (yt-dlp) may be required; (5) prefer read-only usage and test in a controlled environment. If the publisher or upstream project is unknown or you cannot audit the code and extension, consider this higher risk and treat it accordingly.

Like a lobster shell, security has layers — review code before you run it.

latestvk97dtg7xy96sq29e6ba9ry3g7x839r4w
193downloads
0stars
2versions
Updated 9h ago
v1.0.1
MIT-0

OpenCLI Skill

通过 OpenCLI 从各种网站获取数据,无需 API 密钥,复用 Chrome 登录状态。

触发词

  • opencli - 使用 OpenCLI 命令
  • 社交媒体: twitter, reddit, weibo, zhihu, xiaohongshu, jike
  • 视频平台: bilibili, youtube
  • 资讯平台: hackernews, bbc, reuters, linux-do
  • 其他: v2ex, xueqiu, weread, stackoverflow

前置要求

  1. 安装 OpenCLI: npm install -g @jackwener/opencli
  2. 安装 Chrome 扩展: Browser Bridge
  3. Chrome 已登录目标网站

通用选项

opencli <site> <command> [options]

# 通用选项
--limit <n>      # 限制返回数量
-f, --format     # 输出格式: table, json, yaml, md, csv (默认 table)
-v, --verbose    # 调试输出

命令完整列表

antigravity (9 commands)

命令说明参数
dumpDump the DOM to help AI understand the UI-
extract-codeExtract multi-line code blocks from the current Antigravity conversation-
modelSwitch the active LLM model in Antigravityname
newStart a new conversation / clear context in Antigravity-
readRead the latest chat messages from Antigravity AIlast
sendSend a message to Antigravity AI via the internal Lexical editormessage
serve--
statusCheck Antigravity CDP connection and get current page state-
watchStream new chat messages from Antigravity in real-time-

apple-podcasts (5 commands)

命令说明参数
episodesList recent episodes of an Apple Podcast (use ID from search)id, limit
searchSearch Apple Podcastskeyword, limit
topTop podcasts chart on Apple Podcastslimit, country

barchart (4 commands)

命令说明参数
flowBarchart unusual options activity / options flowtype, limit
greeksBarchart options greeks overview (IV, delta, gamma, theta, vega)symbol, expiration, limit
optionsBarchart options chain with greeks, IV, volume, and open interestsymbol, type, limit
quoteBarchart stock quote with price, volume, and key metricssymbol

bbc (1 command)

命令说明参数
newsBBC News headlines (RSS)limit

bilibili (12 commands)

命令说明参数
download下载B站视频(需要 yt-dlp)bvid, output, quality
dynamicGet Bilibili user dynamic feedlimit
favorite我的默认收藏夹limit, page
feed关注的人的动态时间线limit, type
following获取 Bilibili 用户的关注列表uid, page, limit
history我的观看历史limit
hotB站热门视频limit (default: 20)
meMy Bilibili profile info-
rankingGet Bilibili video ranking boardlimit
searchSearch Bilibili videos or userskeyword, type, page, limit
subtitle获取 Bilibili 视频的字幕bvid, lang
user-videos查看指定用户的投稿视频uid, limit, order, page

boss (6 commands)

命令说明参数
chatlistBOSS直聘查看聊天列表(招聘端)page, limit, job_id
chatmsgBOSS直聘查看与候选人的聊天消息uid, page
detailBOSS直聘查看职位详情security_id
resumeBOSS直聘查看候选人简历(招聘端)uid
searchBOSS直聘搜索职位query, city, experience, degree, salary, industry, page, limit
sendBOSS直聘发送聊天消息uid, text

chaoxing (2 commands)

命令说明参数
assignments学习通作业列表course, status, limit
exams学习通考试列表course, status, limit

chatgpt (5 commands)

命令说明参数
askSend a prompt and wait for the AI response (send + wait + read)text, timeout
newOpen a new chat in ChatGPT Desktop App-
readCopy the most recent ChatGPT Desktop App response to clipboard and read it-
sendSend a message to the active ChatGPT Desktop App windowtext
statusCheck if ChatGPT Desktop App is running natively on macOS-

chatwise (9 commands)

命令说明参数
askSend a prompt and wait for the AI responsetext, timeout
exportExport the current ChatWise conversation to a Markdown fileoutput
historyList conversation history in ChatWise sidebar-
modelGet or switch the active AI model in ChatWisemodel_name
newStart a new conversation in ChatWise-
readRead the current ChatWise conversation history-
screenshotCapture a snapshot of the current ChatWise windowoutput
sendSend a message to the active ChatWise conversationtext
statusCheck active CDP connection to ChatWise Desktop-

codex (11 commands)

命令说明参数
askSend a prompt and wait for the AI responsetext, timeout
dumpDump the DOM and Accessibility tree of Codex for reverse-engineering-
exportExport the current Codex conversation to a Markdown fileoutput
extract-diffExtract visual code review diff patches from Codex-
historyList recent conversation threads in Codex-
modelGet or switch the currently active AI model in Codex Desktopmodel_name
newStart a new Codex conversation thread / isolated workspace-
readRead the contents of the current Codex conversation thread-
screenshotCapture a snapshot of the current Codex windowoutput
sendSend text/commands to the Codex AI composertext
statusCheck active CDP connection to OpenAI Codex App-

coupang (2 commands)

命令说明参数
add-to-cartAdd a Coupang product to cart using logged-in browser sessionproductId, url
searchSearch Coupang products with logged-in browser sessionquery, page, limit, filter

ctrip (1 command)

命令说明参数
search携程旅行搜索query, limit

cursor (11 commands)

命令说明参数
askSend a prompt and wait for the AI responsetext, timeout
composerSend a prompt directly into Cursor Composer (Cmd+I shortcut)text
dumpDump the DOM and Accessibility tree of Cursor for reverse-engineering-
exportExport the current Cursor conversationoutput
extract-codeExtract multi-line code blocks from the current Cursor conversation-
historyList recent chat sessions from the Cursor sidebar-
modelGet or switch the currently active AI model in Cursormodel_name
newStart a new Cursor chat or Composer session-
readRead the current Cursor chat/composer conversation history-
screenshotCapture a snapshot of the current Cursor windowoutput
sendSend a prompt directly into Cursor Composer/Chattext
statusCheck active CDP connection to Cursor AI Editor-

discord-app (7 commands)

命令说明参数
channelsList channels in the current Discord server-
membersList online members in the current Discord channel-
readRead recent messages from the active Discord channelcount
searchSearch messages in the current Discord server/channel (Cmd+F)query
sendSend a message in the active Discord channeltext
serversList all Discord servers (guilds) in the sidebar-
statusCheck active CDP connection to Discord Desktop-

feishu (5 commands)

命令说明参数
newCreate a new message or document in Feishu-
readRead the current chat content by selecting all and copying-
searchOpen Feishu global search and type a query (Cmd+K)query
sendSend a message in the active Feishu (Lark) conversationtext
statusCheck if Feishu (Lark) Desktop is running on macOS-

grok (1 command)

命令说明参数
askSend a message to Grok and get responseprompt, timeout, new

hackernews (1 command)

命令说明参数
topHacker News top storieslimit (default: 20)

hf (1 command)

命令说明参数
topTop upvoted Hugging Face papers-

jike (11 commands)

命令说明参数
comment评论即刻帖子id, text
create发布即刻动态text
feed即刻首页动态流limit
like点赞即刻帖子id
notifications即刻通知limit
post即刻帖子详情及评论id
repost转发即刻帖子id, text
search搜索即刻帖子keyword, limit
topic即刻话题/圈子帖子id, limit
user即刻用户动态username, limit

jimeng (2 commands)

命令说明参数
generate即梦AI 文生图 — 输入 prompt 生成图片prompt, model, wait
history即梦AI 查看最近生成的作品limit

linkedin (1 command)

命令说明参数
searchSearch LinkedIn jobsquery, location, limit, start, details, company, experience_level, job_type, date_posted, remote

linux-do (6 commands)

命令说明参数
categorieslinux.do 分类列表limit
categorylinux.do 分类内话题slug, id, limit
hotlinux.do 热门话题limit, period
latestlinux.do 最新话题limit
search搜索 linux.dokeyword, limit
topiclinux.do 帖子详情和回复id

neteasemusic (10 commands)

命令说明参数
likeLike/unlike the currently playing song-
lyricsGet the lyrics of the currently playing song-
nextSkip to the next song-
playToggle play/pause for the current song-
playingGet the currently playing song info-
playlistShow the current playback queue / playlist-
prevGo back to the previous song-
searchSearch for songs, artists, albums, or playlistsquery
statusCheck CDP connection to NeteaseMusic Desktop-
volumeGet or set the volume level (0-100)level

notion (8 commands)

命令说明参数
exportExport the current Notion page as Markdownoutput
favoritesList pages from the Notion Favorites section in the sidebar-
newCreate a new page in Notiontitle
readRead the content of the currently open Notion page-
searchSearch pages and databases in Notion via Quick Find (Cmd+P)query
sidebarList pages and databases from the Notion sidebar-
statusCheck active CDP connection to Notion Desktop-
writeAppend text content to the currently open Notion pagetext

reddit (13 commands)

命令说明参数
commentPost a comment on a Reddit postpost_id, text
frontpageReddit Frontpage / r/alllimit
hotReddit 热门帖子subreddit, limit
popularReddit Popular posts (/r/popular)limit
readRead a Reddit post and its commentspost_id, sort, limit, depth, replies, max_length
saveSave or unsave a Reddit postpost_id, undo
savedBrowse your saved Reddit postslimit
searchSearch Reddit Postsquery, subreddit, sort, time, limit
subredditGet posts from a specific Subredditname, sort, time, limit
subscribeSubscribe or unsubscribe to a subredditsubreddit, undo
upvoteUpvote or downvote a Reddit postpost_id, direction
upvotedBrowse your upvoted Reddit postslimit
user-commentsView a Reddit user's comment historyusername, limit
user-postsView a Reddit user's submitted postsusername, limit
userView a Reddit user profileusername

reuters (1 command)

命令说明参数
searchReuters 路透社新闻搜索query, limit

smzdm (1 command)

命令说明参数
search什么值得买搜索好价keyword, limit

stackoverflow (4 commands)

命令说明参数
bountiesActive bounties on Stack Overflowlimit
hotHot Stack Overflow questionslimit
searchSearch Stack Overflow questionsquery, limit
unansweredTop voted unanswered questions on Stack Overflowlimit

twitter (19 commands)

命令说明参数
acceptAuto-accept DM requests containing specific keywordskeyword, max
articleFetch a Twitter Article (long-form content) and export as Markdowntweet_id
bookmarkBookmark a tweeturl
bookmarksFetch Twitter/X bookmarkslimit
deleteDelete a specific tweet by URLurl
download下载 Twitter/X 媒体(图片和视频)username, tweet-url, limit, output
followFollow a Twitter userusername
followersGet accounts following a Twitter/X useruser, limit
followingGet accounts a Twitter/X user is followinguser, limit
likeLike a specific tweeturl
notificationsGet Twitter/X notificationslimit
postPost a new tweet/threadtext
profileFetch a Twitter user profile (bio, stats, etc.)username
reply-dmSend a message to recent DM conversationstext, max, skip-replied
replyReply to a specific tweeturl, text
searchSearch Twitter/X for tweetsquery, limit
threadGet a tweet thread (original + all replies)tweet_id, limit
timelineFetch Twitter Home Timelinelimit
trendingTwitter/X trending topicslimit
unbookmarkRemove a tweet from bookmarksurl
unfollowUnfollow a Twitter userusername

v2ex (6 commands)

命令说明参数
dailyV2EX 每日签到并领取铜币-
hotV2EX 热门话题limit
latestV2EX 最新话题limit
meV2EX 获取个人资料 (余额/未读提醒)-
notificationsV2EX 获取提醒 (回复/由于)limit
topicV2EX 主题详情和回复id

wechat (6 commands)

命令说明参数
chatsOpen the WeChat chats panel (conversation list)-
contactsOpen the WeChat contacts panel-
readRead the current chat content by selecting all and copying-
searchOpen WeChat search and type a query (find contacts or messages)query
sendSend a message in the active WeChat conversation via clipboard pastetext
statusCheck if WeChat Desktop is running on macOS-

weibo (1 command)

命令说明参数
hot微博热搜limit

weread (8 commands)

命令说明参数
bookView book details on WeReadbookId
highlightsList your highlights (underlines) in a bookbookId, limit
notebooksList books that have highlights or notes-
notesList your notes (thoughts) on a bookbookId, limit
rankingWeRead book rankings by categorycategory, limit
searchSearch books on WeReadkeyword, limit
shelfList books on your WeRead bookshelflimit

xiaohongshu (15 commands)

命令说明参数
creator-note-detail小红书单篇笔记详情页数据note_id
creator-notes-summary小红书最近笔记批量摘要limit
creator-notes小红书创作者笔记列表 + 每篇数据limit
creator-profile小红书创作者账号信息 (粉丝/关注/获赞/成长等级)-
creator-stats小红书创作者数据总览 (观看/点赞/收藏/评论/分享/涨粉,含每日趋势)period
download下载小红书笔记中的图片和视频note_id, output
feed小红书首页推荐 Feedlimit
notifications小红书通知 (mentions/likes/connections)type, limit
search搜索小红书笔记keyword, limit
userGet public notes from a Xiaohongshu user profileid, limit

xiaoyuzhou (5 commands)

命令说明参数
episodeView details of a Xiaoyuzhou podcast episodeid
podcast-episodesList recent episodes of a Xiaoyuzhou podcast (up to 15, SSR limit)id, limit
podcastView a Xiaoyuzhou podcast profileid

xueqiu (6 commands)

命令说明参数
feed获取雪球首页时间线(关注用户的动态)page, limit
hot-stock获取雪球热门股票榜limit, type
hot获取雪球热门动态limit
search搜索雪球股票(代码或名称)query, limit
stock获取雪球股票实时行情symbol
watchlist获取雪球自选股列表category, limit

yahoo-finance (1 command)

命令说明参数
quoteYahoo Finance 股票行情symbol

youtube (5 commands)

命令说明参数
searchSearch YouTube videosquery, limit
transcriptGet YouTube video transcript/subtitles-
videoGet YouTube video metadata (title, views, description, etc.)url

zhihu (4 commands)

命令说明参数
download导出知乎文章为 Markdown 格式url, output, download-images
hot知乎热榜limit
question知乎问题详情和回答id, limit
search知乎搜索keyword, limit

输出格式

格式说明使用场景
table表格格式(默认)人类阅读
jsonJSON 格式程序处理、数据提取
yamlYAML 格式配置文件、数据序列化
mdMarkdown 格式文档生成
csvCSV 格式数据分析、Excel 导入

诊断命令

# 检查 Browser Bridge 连接状态
opencli doctor

# 实时测试浏览器连接
opencli doctor --live

# 交互式设置
opencli setup

# 列出所有可用命令
opencli list

注意事项

  1. 登录状态: 浏览器命令复用 Chrome 登录状态,确保已在 Chrome 中登录目标网站
  2. Chrome 扩展: 必须安装 Browser Bridge 扩展
  3. 命令模式:
    • [public] - 公开 API,无需登录
    • [cookie] - 需要 Chrome 登录状态
    • [ui] - UI 自动化,需要应用在前台运行
  4. 输出解析: 使用 -f json 格式便于程序解析
  5. 调试: 使用 -v 参数查看详细日志

Comments

Loading comments...