← Back to Skills Marketplace
21251
Downloads
13
Stars
0
Active Installs
7
Versions
Install in OpenClaw
/install juejin-skills
Description
掘金技术社区一站式操作技能，支持热门文章排行榜查询、Markdown 文章发布（默认草稿）和文章下载保存为 Markdown。
Usage Guidance
Install only if you trust this publisher with your Juejin account session. Use it on a personal machine, avoid shared or CI environments, keep public publishing in draft-only mode unless intentionally confirming publication, and delete ~/.juejin_cookie.json when finished. Treat the lower-level Python API as unsafe for untrusted callers until URL validation, cookie-path constraints, redirect handling, and the vulnerable lxml pin are fixed.
Capability Assessment
Credentials
Network access, browser automation, local Markdown reads, and output writes fit the purpose. The concerns are that image downloads follow redirects after only initial host allowlisting, and the authenticated HTTP client lacks destination validation.
Install Mechanism
Installation is ordinary Python dependency installation plus Playwright Chromium setup. A pinned lxml dependency was flagged as vulnerable, which is a dependency hygiene concern rather than evidence of malicious installation behavior.
Instruction Scope
SKILL.md provides narrow activation rules, explicit user-input requirements, draft-only defaults, bulk-download confirmation, and warnings around credentials. These controls are clear, but they rely on callers using the higher-level workflows rather than the lower-level public API escape hatches.
Persistence & Privilege
The skill clearly discloses persistent storage of the Juejin session cookie at ~/.juejin_cookie.json with 0600 permissions and removal guidance. The configurable cookie_path in JuejinAuth can nevertheless write or delete arbitrary caller-selected writable paths, which exceeds the advertised credential-file scope.
Purpose & Capability
The stated purpose is coherent: query Juejin, create drafts or publish articles, and download Juejin articles. However, the exported JuejinAPI can send an authenticated Cookie header to any caller-supplied URL, which exceeds the declared Juejin-only network boundary.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install juejin-skills - After installation, invoke the skill by name or use
/juejin-skills - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.8
重新发布1.0.7版本的安全修复：./output写边界守卫(_validate_output_dir) + download_user_articles双重确认门(confirm_bulk=True) + 批量硬上限BULK_DOWNLOAD_HARD_CAP=50；SKILL.md声明bulk_download_policy
v1.0.7
修复Scope Creep与Description-Behavior Mismatch：downloader增加_validate_output_dir写边界守卫(./output / $JUEJIN_OUTPUT_ROOT)，download_user_articles增加confirm_bulk双重确认与硬上限50，SKILL.md声明bulk_download_policy并修正filesystem_write边界声明
v1.0.6
修复MCP最小权限问题：publisher增加.md路径白名单与大小限制，SKILL.md声明filesystem_read权限并收紧触发关键词，移除一键发布等模糊措辞
v1.0.5
修复安全漏洞：添加图片下载域名白名单限制，缩小技能触发关键词范围
v1.0.2
**Version 1.0.2 changelog (juejin-skills):**
- Enhanced SKILL.md metadata with version, source, homepage, author, and repository information.
- Clarified authentication file security: explicitly sets cookie file permissions to 0600 and documents security practices.
- Added strict public publish safeguards: API and CLI now require multiple explicit confirmations for publishing articles publicly; defaults remain draft-only.
- Updated credential and permission descriptions with more detailed hardening, file format, and ignore list notes.
- No core functionality changes to the main publishing, download, or ranking features.
v1.0.1
**Changelog for juejin-skills v1.0.1**
- Added explicit credentials, permissions, and publish policy declarations in SKILL.md for enhanced security and transparency.
- The skill now documents how the juejin login session cookie is stored, its permissions, and instructions for revocation.
- Declares required permissions for network, local write (for cookies and downloads), and browser automation in SKILL.md.
- Default publish behavior is set to draft-only, with explicit user confirmation needed for public article publishing.
- No functional or API changes to skill logic; updates focus on credential and permission handling documentation.
v1.0.0
Juejin Skills 1.0.0 – Initial Release
- Query trending articles, category rankings, and article categories from Juejin.
- One-click publish Markdown articles to Juejin, including login support via Playwright.
- Download and save Juejin articles (single or batch) as Markdown, with image and metadata support.
- Natural language command support for all main actions.
Metadata
Frequently Asked Questions
What is 掘金技能集?
掘金技术社区一站式操作技能，支持热门文章排行榜查询、Markdown 文章发布（默认草稿）和文章下载保存为 Markdown。 It is an AI Agent Skill for Claude Code / OpenClaw, with 21251 downloads so far.
How do I install 掘金技能集?
Run "/install juejin-skills" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is 掘金技能集 free?
Yes, 掘金技能集 is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does 掘金技能集 support?
掘金技能集 is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created 掘金技能集?
It is built and maintained by enoyao (@wscats); the current version is v1.0.8.
More Skills