Weibo TrendNote AI PC

Fetch Weibo realtime hot search rankings, summarize trending topics with a local model, and append the hot list plus digest to an Obsidian note. Supports one...

Security Scan

The skill's code and instructions match its stated purpose (fetch Weibo hot lists, summarize locally, and append to Obsidian); it has some minor coherence/usability concerns (hardcoded Windows user paths, implicit external CLI dependencies, and optional cron registration) but nothing that contradicts its description or indicates intentional misdirection.

Purpose & Capability

Name/description align with behavior: scripts fetch Weibo, summarize with a local CLI, and write to Obsidian. Declared required binaries (openclaw and python) are consistent with the runner and cron install actions. One mismatch: the registry metadata lists no required config paths, yet the SKILL.md and all scripts consistently use a hardcoded state/config location (C:\Users\Intel\.openclaw\state\weibo_hot). The hardcoded user path is unusual but is documented in SKILL.md and justified in code comments (NSSM/SYSTEM context).

Instruction Scope

SKILL.md instructs running the Python runner and optionally installing OpenClaw crons—this matches the scripts. The scripts read an optional env.ps1 to load environment variables, perform network requests to weibo.com, run subprocesses (notesmd-cli, summarize CLI, openclaw), and write local state and Obsidian notes. These actions are within the stated purpose, but the runner forces APPDATA/USERPROFILE/HOME to the hardcoded Intel profile when invoking notesmd-cli and expects optional external CLIs; that behavior should be understood before installing.

Install Mechanism

No install spec; the skill is instruction/files-only and ships Python scripts. There are no downloads or archive extraction steps in the bundled files. This is a lower-risk install mechanism (code runs from the skill bundle).

Credentials

The skill declares no required env vars but will read environment variables (and an env.ps1 file) to locate external tools (NOTESMD_BIN, SUMMARIZE_BIN, OPENCLAW_BIN, OBSIDIAN_VAULT, etc.). It also force-sets APPDATA/USERPROFILE/HOME to C:\Users\Intel for notesmd-cli, and uses several hardcoded paths under that profile. While these choices are documented, they can be surprising: env.ps1 can inject environment values into the process (including any secrets present there), and the skill will create and overwrite files in the hardcoded profile path. The skill does not request cloud credentials—but its implicit reliance on external CLIs (notesmd-cli and summarize) is not declared in the registry metadata.

Persistence & Privilege

always:false (good). The skill can register persistent scheduled jobs via the openclaw CLI when the user explicitly requests install-crons; that modifies OpenClaw's cron registry (expected for scheduling functionality). This is a legitimate capability for the skill but increases persistence/blast radius if enabled—SKILL.md advises installing crons only on explicit user request.

Assessment

This skill appears to do what it says, but review these points before installing: - It hardcodes Windows paths under C:\Users\Intel (state files, APPDATA overrides). Confirm those paths are correct for your environment; running as a different Windows user or service may produce unexpected behavior. - The skill expects external CLIs (notesmd-cli and an npm-provided summarize CLI). Ensure those binaries exist at the paths you want or set NOTESMD_BIN / SUMMARIZE_BIN (via env or an env.ps1) before running. - The runner will load an optional env.ps1 (it only parses $env:NAME = value assignments). Inspect env.ps1 if present—any environment variables (including tokens) there will be injected into the process and used by subprocesses. - Do not run the install-crons mode unless you want the skill to create persistent OpenClaw cron jobs; the SKILL.md warns about this and it requires explicit user action. - Recommended initial steps: run the one-time command (python "{baseDir}/skill_runner.py" once) to validate behavior, check the created files under the stated state dir, and only enable cron installation after verifying everything works and the external CLIs are configured.

Use this skill to fetch current Weibo hot trends, summarize them locally, and append the result to Obsidian.

What it does

• Fetches the current Weibo hot search list.
• Summarizes the latest hot topics with a local summarize CLI / local model flow.
• Appends the hot list and summary to an Obsidian note.
• Can optionally register recurring cron jobs, but only when the user explicitly asks for scheduled automation.

Safety and side effects

• This skill writes local state files under C:\Users\Intel\.openclaw\state\weibo_hot.
• This skill appends content to an Obsidian note.
• Optional cron setup creates persistent scheduled jobs in OpenClaw.
• Do not install recurring cron jobs unless the user explicitly asks for ongoing automation.

Recommended commands

One-time run

Use this for a normal fetch → summarize → write pass:

exec: python "{baseDir}/skill_runner.py" once

To force a full run even when the hot list has not changed:

exec: python "{baseDir}/skill_runner.py" once --force

Optional recurring automation

Only use this after the user explicitly asks to enable scheduled runs:

exec: python "{baseDir}/skill_runner.py" install-crons

Notes

• This skill is Windows-only.
• The runner loads optional values from C:\Users\Intel\.openclaw\state\weibo_hot\env.ps1 when present.
• If env.ps1 is absent, the bundled scripts fall back to their built-in defaults.