Douban Self Taste Skill

ReviewAudited by ClawScan on May 1, 2026.

Overview

This skill is coherent for analyzing your own Douban history, but it uses Douban cookies and keeps a local cache of personal ratings and comments.

Before installing or using this skill, decide whether you are comfortable placing Douban cookies and personal history in `.local/douban-self-taste/`. Use it only with your own Douban UID, keep the cookie and cache files private, and delete them when you no longer want the agent to reuse that data.

Findings (3)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

When you ask for Douban taste analysis, the agent may fetch your logged-in Douban history and update local files rather than only reading existing cache.

Why it was flagged

The skill can run a network refresh and write local cache files as part of its normal workflow. This is disclosed and purpose-aligned, but users should know it may crawl logged-in pages when cache is stale or missing.

Skill content
If cache exists but its `fetched_at` timestamp is older than 7 days, crawling is needed. ... When cookies are available, crawl the user's own Douban shelves and store the refreshed result in local JSON cache files.
Recommendation

Use the skill only for your own Douban account, and confirm that automatic cache refresh is acceptable before placing valid cookies in the configured path.

What this means

Anyone or any agent with access to the cookie file may be able to use your Douban session to read account-specific pages.

Why it was flagged

The skill expects browser-exported Douban cookies for logged-in access. This is appropriate for collecting the user's own private history, but cookies are sensitive session credentials.

Skill content
Store Douban cookies at: `.local/douban-self-taste/cookies/douban_cookies.json` ... Expected format: a JSON array of browser-style cookie objects
Recommendation

Store only Douban cookies in the specified local file, keep it private, remove it when no longer needed, and do not share it with other tools or people.

What this means

Your Douban taste history and comments may remain available locally for future agent tasks or to anyone with access to the workspace files.

Why it was flagged

The skill intentionally stores personal ratings, comments, and history for reuse in later analysis. This is central to the skill, but it creates persistent local data that may be sensitive.

Skill content
Treat the cache as reusable local working data. ... preserve raw comments and rating information
Recommendation

Review and protect `.local/douban-self-taste/`, delete cache or analysis files when you no longer need them, and avoid sharing generated files unless you have checked their contents.