Juejin Article Trends

PassAudited by ClawScan on May 1, 2026.

Overview

The skill is coherent and limited to fetching public Juejin category and article ranking data, with no credentials, persistence, or local-data access shown.

This appears safe for its stated purpose of checking Juejin article trends. Before installing, be aware that it executes a bundled Node.js script and contacts Juejin’s public APIs, but the provided artifacts do not show credential use, local file access, persistence, or data exfiltration.

Findings (2)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Using the skill means executing the bundled JavaScript file locally.

Why it was flagged

The skill works by running an included local Node.js script. This is clearly documented and central to the stated purpose, with no installer or hidden execution path shown.

Skill content
node scripts/juejin.js categories
Recommendation

Use it in an environment where Node.js execution is expected, and review the included script if local code execution is a concern.

What this means

The skill sends category and article-ranking queries to Juejin and returns public data; it does not show local sensitive data being sent.

Why it was flagged

The script sends automated requests to Juejin APIs using randomized browser-style User-Agent headers. This is consistent with fetching public trend data, but users should know it performs external automated requests.

Skill content
'User-Agent': getRandomUserAgent()
Recommendation

Use the skill only for the advertised public ranking lookups and ensure this type of automated access is acceptable for your use case.