← Back to Skills Marketplace
Zhihu CLI
by
lightislost
· GitHub ↗
· v1.0.0
610
Downloads
0
Stars
1
Active Installs
1
Versions
Install in OpenClaw
/install zhihu-cli
Description
Command-line tool for searching, reading, and interacting with Zhihu (知乎). Supports hot topics, content search, article reading, user info, and Browser Relay...
Usage Guidance
Before installing or running this CLI, verify the npm package source and inspect its code: find the package author, repository, and homepage on npm. Understand exactly how 'zhihu login' extracts cookies (which browser files it reads) and whether cookies are stored or transmitted elsewhere; storing cookies in plain files (~/.zhihu-cookie) risks credential theft. Prefer safer authentication methods (OAuth or token-based) if available. If you must try it, run the npm package in an isolated environment (VM or disposable container), and do not use accounts with sensitive access. Ask the publisher for the package repository link and a detailed explanation of cookie handling and Browser Relay behavior; absence of those answers increases risk.
Capability Analysis
Type: OpenClaw Skill
Name: zhihu-cli
Version: 1.0.0
The zhihu-cli skill documentation (SKILL.md) describes a tool that performs high-risk credential handling, specifically the automated extraction of authentication cookies from the Chrome browser and storing them in a local file (~/.zhihu-cookie). While these features are aligned with the stated purpose of interacting with the Zhihu platform, the automated extraction of browser data and the instructions for the agent to execute JavaScript via 'Browser Relay' for voting and following actions represent a significant security risk and potential for account misuse.
Capability Assessment
Purpose & Capability
The skill claims to be a CLI for Zhihu which plausibly needs authentication, but the SKILL.md promotes an npm package that 'auto-extracts cookies from Chrome' and stores them in ~/.zhihu-cookie. The skill metadata declares no required config paths or credentials, so the implied need to access browser cookie stores is not documented or justified.
Instruction Scope
Runtime instructions tell users to npm install (or npx) an external package and to run 'zhihu login' which 'opens Chrome and extracts cookies automatically'. The docs also advise storing cookies in ~/.zhihu-cookie and include JS snippets for Browser Relay to click buttons. These steps involve reading sensitive local browser data and executing JS in a browser context—actions outside a simple read/search use-case and not fully explained.
Install Mechanism
There is no install spec bundled with the skill; SKILL.md instructs installing from the public npm registry (npm install -g zhihu-cli or npx). Installing an unvetted npm package from an unknown source (no homepage, no repository listed) is moderate-to-high risk because the package could perform arbitrary actions (including cookie extraction/exfiltration).
Credentials
The skill requests no environment variables but instructs handling of sensitive credentials (browser cookies) and persistent storage (~/.zhihu-cookie). Sensitive access is implied but not declared. There is no explanation about file protections, encryption, or what the cookie file contains/is used for—this is disproportionate to the metadata provided.
Persistence & Privilege
The skill does not request always:true, does not claim to modify other skills or system-wide configs, and is user-invocable. No elevated platform-level privileges are requested in the metadata.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install zhihu-cli - After installation, invoke the skill by name or use
/zhihu-cli - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release
Metadata
Frequently Asked Questions
What is Zhihu CLI?
Command-line tool for searching, reading, and interacting with Zhihu (知乎). Supports hot topics, content search, article reading, user info, and Browser Relay... It is an AI Agent Skill for Claude Code / OpenClaw, with 610 downloads so far.
How do I install Zhihu CLI?
Run "/install zhihu-cli" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Zhihu CLI free?
Yes, Zhihu CLI is completely free (open-source). You can download, install and use it at no cost.
Which platforms does Zhihu CLI support?
Zhihu CLI is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Zhihu CLI?
It is built and maintained by lightislost (@lightislost); the current version is v1.0.0.
More Skills