weread_assitant

Sync WeRead shelf state, reading progress, visible book content, and note-ready Markdown into a local workspace using the user's logged-in Chrome session. Us...

This skill appears to do what it claims, but review these points before installing: - Understand local access: it drives your local Chrome (via a CDP proxy) and will load WeRead pages using your existing login — the browser will send your session cookies to WeRead even though the code does not read cookie/localStorage values itself. Only run it on machines you control. - obsidian-cli trust: publishing is done by invoking obsidian-cli with the generated Markdown. Confirm obsidian-cli is the official tool you installed and that your vault configuration is correct. - CDP proxy origin: the scripts call a local endpoint (http://localhost:3456). Ensure that proxy is indeed local and not forwarding requests to a remote host you don't control. - Privacy hygiene: inspect output/ before sharing, avoid bulk exports unless you understand privacy/legal implications, and disable Chrome remote debugging when not in use. If you need higher assurance, you can audit the small extraction functions (scripts/*) — they are readable and explicitly focus on visible DOM/text extraction — or run the scripts in a sandboxed account/vault first.

Type: OpenClaw Skill Name: weread-assitant Version: 1.0.1 The skill bundle facilitates syncing WeRead bookshelf data and book content into Obsidian notes. It employs high-risk capabilities, specifically browser automation via the Chrome DevTools Protocol (CDP) to interact with a user's logged-in session (found in scripts/cdp-client.mjs, scripts/fetch-book.mjs, and scripts/fetch-shelf.mjs) and local shell command execution using execFile to interface with the obsidian-cli (scripts/publish-obsidian.mjs). While these actions are consistent with the stated purpose and the project includes a detailed SECURITY.md acknowledging these risks, the combination of browser control and host-level command execution constitutes a significant attack surface that warrants a suspicious classification.