Juejin Article Trends
PassAudited by ClawScan on May 1, 2026.
Overview
The skill is coherent and limited to fetching public Juejin category and article ranking data, with no credentials, persistence, or local-data access shown.
This appears safe for its stated purpose of checking Juejin article trends. Before installing, be aware that it executes a bundled Node.js script and contacts Juejin’s public APIs, but the provided artifacts do not show credential use, local file access, persistence, or data exfiltration.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Using the skill means executing the bundled JavaScript file locally.
The skill works by running an included local Node.js script. This is clearly documented and central to the stated purpose, with no installer or hidden execution path shown.
node scripts/juejin.js categories
Use it in an environment where Node.js execution is expected, and review the included script if local code execution is a concern.
The skill sends category and article-ranking queries to Juejin and returns public data; it does not show local sensitive data being sent.
The script sends automated requests to Juejin APIs using randomized browser-style User-Agent headers. This is consistent with fetching public trend data, but users should know it performs external automated requests.
'User-Agent': getRandomUserAgent()
Use the skill only for the advertised public ranking lookups and ensure this type of automated access is acceptable for your use case.
