โ Back to Skills Marketplace
Weibo Hot Daily
by
่ๅคฉ
ยท GitHub โ
ยท v2.1.1
ยท MIT-0
174
Downloads
0
Stars
1
Active Installs
7
Versions
Install in OpenClaw
/install weibo-hot-daily
Description
๐ฅ ๆฏๆฅ่ชๅจๆๅๅพฎๅ็ญๆๆฆ๏ผๆฏๆAIๆ่ฆๅๅคๆธ ้ๆจ้ใ่ชๅชไฝ่ฟ่ฅๅฟ
ๅค๏ผๅ
่ดนไฝฟ็จ๏ผๅฎๅถๅผๅ่ฏท่็ณปไฝ่
ใ
Usage Guidance
Do not run this script blindly on sensitive systems. Specific things to consider before installing or running: 1) The script contains a hard-coded Weibo SUB cookie (a session credential) โ treat this as sensitive; prefer the author remove it and require the user to provide credentials via environment variables or a config file. 2) Many advertised features (multi-channel push, scheduling, full AI summaries) are not implemented in the provided code โ ask the author for clarification or full source before trusting claims. 3) If you plan to use AI features, supply API keys via secure env vars (not command-line history) and confirm how the key is used. 4) Run any untrusted script in a sandbox/container and inspect network requests (to ensure no unexpected endpoints). 5) Verify the source repository and author identity (the package metadata and homepage should match a real repo) and confirm compliance with Weibo's terms. If you cannot verify or the author does not remove the hard-coded cookie, consider this skill unsafe to run with sensitive accounts.
Capability Analysis
Type: OpenClaw Skill
Name: weibo-hot-daily
Version: 2.1.1
The skill is a functional tool for fetching Weibo hot search data via the platform's public AJAX API. The code in fetch_hot.py implements standard scraping logic, including data parsing and export to JSON/CSV. While it includes a hardcoded session cookie (common in scrapers to bypass basic bot detection) and a static os.system call to set Windows console encoding, these behaviors are non-malicious and directly support the stated purpose. No evidence of data exfiltration, unauthorized execution, or prompt injection was found.
Capability Assessment
Purpose & Capability
The name/description promise AI summaries, multi-channel push, and scheduled daily runs, but the shipped code only fetches hot topics and optionally writes JSON/CSV and a simple summary. The code includes a hard-coded 'Cookie' header (a SUB session cookie) embedded in Weibo request headers โ that is effectively a credential baked into the script even though the skill declares no required environment variables or credentials. The presence of an embedded session cookie is disproportionate and unexpected for a simple fetch script.
Instruction Scope
SKILL.md instructs users to run python3 fetch_hot.py and examples show --summary usage, but it does not mention the embedded cookie or how credentials should be handled. The README/SKILL advertise multi-channel push and scheduled automation, but no push/scheduling code is present. The script accepts an --api-key flag (for an OpenAI key) and contains a TODO for OpenAI integration, yet the documentation doesn't explain how to supply or protect such keys; this is inconsistent and grants the agent (or user) little guidance about sensitive inputs.
Install Mechanism
There is no install spec and the skill is instruction+script only; required binary is python3 which is coherent. This lowers installation risk since nothing is downloaded or extracted by the skill installer. One oddity: package.json lists a 'python' dependency (a Node-style dependency declaration) which is not meaningful for runtime but is not a direct install-time risk.
Credentials
The skill declares no required environment variables, yet the code embeds a Weibo session cookie directly in headers (a sensitive credential). It also supports an --api-key argument for AI features but does not declare or recommend using an env var for it. Hard-coding credentials in code is disproportionate and risky; proper design would accept sensitive tokens via environment variables or secure config.
Persistence & Privilege
The skill does not request always:true or any elevated persistence. It does not modify other skills or system settings. Autonomous invocation is permitted by default (not flagged here) but the skill itself does not claim persistent/system-wide privileges.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install weibo-hot-daily - After installation, invoke the skill by name or use
/weibo-hot-daily - Provide required inputs per the skill's parameter spec and get structured output
Version History
v2.1.1
ๆทปๅ ๅ
่ดฃๅฃฐๆ๏ผๆ็กฎๆฐๆฎๆฅๆบๅไฝฟ็จ้ๅถ
v2.1.0
v2.1: ไผๅAPI็จณๅฎๆง๏ผๆนๅๆฐๆฎๅฑ็คบ
v2.0.0
v2.0: ไฟฎๅคไธญๆไนฑ็ ๏ผไผๅ่พๅบๆ ผๅผ
v1.0.3
ๆทปๅ ้ฎ็ฎฑ่็ณปๆนๅผ
v1.0.2
ๆดๆฐ่็ณปๆนๅผ๏ผQQ 2595075878
v1.0.1
ๆทปๅ ๅฎๅถๆๅก่็ณปๆนๅผ
v1.0.0
Initial release of weibo-hot-daily:
- ่ชๅจๆๅๅพฎๅ็ญๆๆฆ Top 50๏ผๆฏๆAIๆบ่ฝๆ่ฆ็ๆ๏ผๆๅ็ฑป๏ผใ
- ๆฏๆๆจ้่ณ Telegramใๅพฎไฟกใ้ฎไปถ็ญๅคๆธ ้๏ผๅๆฏๆฅๅฎๆถ่ชๅจๆง่กใ
- ๆไพ็ญๅบฆๆๅๅๅ็ป่ฎกไธ่พๅบๅค็งๆ ผๅผ๏ผJSON/CSV๏ผใ
- ๅบไบ่ชๅฎไนๅๆฐ๏ผๅฏ็ญ้ๅ็ฑปใๆๅฎ่พๅบๆนๅผ๏ผๅนถ้ๆOpenAI API Key็จไบๆ่ฆ็ๆใ
- ๅ
่ดน็/Pro็ๅ่ฝๅบๅ๏ผๆ่ฏฆ็ปๅฎ่ฃ
ไธ็จๆณ่ฏดๆใ
Metadata
Frequently Asked Questions
What is Weibo Hot Daily?
๐ฅ ๆฏๆฅ่ชๅจๆๅๅพฎๅ็ญๆๆฆ๏ผๆฏๆAIๆ่ฆๅๅคๆธ ้ๆจ้ใ่ชๅชไฝ่ฟ่ฅๅฟ ๅค๏ผๅ ่ดนไฝฟ็จ๏ผๅฎๅถๅผๅ่ฏท่็ณปไฝ่ ใ It is an AI Agent Skill for Claude Code / OpenClaw, with 174 downloads so far.
How do I install Weibo Hot Daily?
Run "/install weibo-hot-daily" in the OpenClaw or Claude Code chat to install it in one step โ no extra setup required.
Is Weibo Hot Daily free?
Yes, Weibo Hot Daily is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Weibo Hot Daily support?
Weibo Hot Daily is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Weibo Hot Daily?
It is built and maintained by ่ๅคฉ (@qq853632587); the current version is v2.1.1.
More Skills