โ† Back to Skills Marketplace
qq853632587

Weibo Hot Daily

by ่“ๅคฉ ยท GitHub โ†— ยท v2.1.1 ยท MIT-0
cross-platform โš  suspicious
174
Downloads
0
Stars
1
Active Installs
7
Versions
Install in OpenClaw
/install weibo-hot-daily
Description
๐Ÿ”ฅ ๆฏๆ—ฅ่‡ชๅŠจๆŠ“ๅ–ๅพฎๅš็ƒญๆœๆฆœ๏ผŒๆ”ฏๆŒAIๆ‘˜่ฆๅ’Œๅคšๆธ ้“ๆŽจ้€ใ€‚่‡ชๅช’ไฝ“่ฟ่ฅๅฟ…ๅค‡๏ผๅ…่ดนไฝฟ็”จ๏ผŒๅฎšๅˆถๅผ€ๅ‘่ฏท่”็ณปไฝœ่€…ใ€‚
Usage Guidance
Do not run this script blindly on sensitive systems. Specific things to consider before installing or running: 1) The script contains a hard-coded Weibo SUB cookie (a session credential) โ€” treat this as sensitive; prefer the author remove it and require the user to provide credentials via environment variables or a config file. 2) Many advertised features (multi-channel push, scheduling, full AI summaries) are not implemented in the provided code โ€” ask the author for clarification or full source before trusting claims. 3) If you plan to use AI features, supply API keys via secure env vars (not command-line history) and confirm how the key is used. 4) Run any untrusted script in a sandbox/container and inspect network requests (to ensure no unexpected endpoints). 5) Verify the source repository and author identity (the package metadata and homepage should match a real repo) and confirm compliance with Weibo's terms. If you cannot verify or the author does not remove the hard-coded cookie, consider this skill unsafe to run with sensitive accounts.
Capability Analysis
Type: OpenClaw Skill Name: weibo-hot-daily Version: 2.1.1 The skill is a functional tool for fetching Weibo hot search data via the platform's public AJAX API. The code in fetch_hot.py implements standard scraping logic, including data parsing and export to JSON/CSV. While it includes a hardcoded session cookie (common in scrapers to bypass basic bot detection) and a static os.system call to set Windows console encoding, these behaviors are non-malicious and directly support the stated purpose. No evidence of data exfiltration, unauthorized execution, or prompt injection was found.
Capability Assessment
โš  Purpose & Capability
The name/description promise AI summaries, multi-channel push, and scheduled daily runs, but the shipped code only fetches hot topics and optionally writes JSON/CSV and a simple summary. The code includes a hard-coded 'Cookie' header (a SUB session cookie) embedded in Weibo request headers โ€” that is effectively a credential baked into the script even though the skill declares no required environment variables or credentials. The presence of an embedded session cookie is disproportionate and unexpected for a simple fetch script.
โš  Instruction Scope
SKILL.md instructs users to run python3 fetch_hot.py and examples show --summary usage, but it does not mention the embedded cookie or how credentials should be handled. The README/SKILL advertise multi-channel push and scheduled automation, but no push/scheduling code is present. The script accepts an --api-key flag (for an OpenAI key) and contains a TODO for OpenAI integration, yet the documentation doesn't explain how to supply or protect such keys; this is inconsistent and grants the agent (or user) little guidance about sensitive inputs.
โœ“ Install Mechanism
There is no install spec and the skill is instruction+script only; required binary is python3 which is coherent. This lowers installation risk since nothing is downloaded or extracted by the skill installer. One oddity: package.json lists a 'python' dependency (a Node-style dependency declaration) which is not meaningful for runtime but is not a direct install-time risk.
โš  Credentials
The skill declares no required environment variables, yet the code embeds a Weibo session cookie directly in headers (a sensitive credential). It also supports an --api-key argument for AI features but does not declare or recommend using an env var for it. Hard-coding credentials in code is disproportionate and risky; proper design would accept sensitive tokens via environment variables or secure config.
โœ“ Persistence & Privilege
The skill does not request always:true or any elevated persistence. It does not modify other skills or system settings. Autonomous invocation is permitted by default (not flagged here) but the skill itself does not claim persistent/system-wide privileges.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install weibo-hot-daily
  3. After installation, invoke the skill by name or use /weibo-hot-daily
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v2.1.1
ๆทปๅŠ ๅ…่ดฃๅฃฐๆ˜Ž๏ผŒๆ˜Ž็กฎๆ•ฐๆฎๆฅๆบๅ’Œไฝฟ็”จ้™ๅˆถ
v2.1.0
v2.1: ไผ˜ๅŒ–API็จณๅฎšๆ€ง๏ผŒๆ”นๅ–„ๆ•ฐๆฎๅฑ•็คบ
v2.0.0
v2.0: ไฟฎๅคไธญๆ–‡ไนฑ็ ๏ผŒไผ˜ๅŒ–่พ“ๅ‡บๆ ผๅผ
v1.0.3
ๆทปๅŠ ้‚ฎ็ฎฑ่”็ณปๆ–นๅผ
v1.0.2
ๆ›ดๆ–ฐ่”็ณปๆ–นๅผ๏ผšQQ 2595075878
v1.0.1
ๆทปๅŠ ๅฎšๅˆถๆœๅŠก่”็ณปๆ–นๅผ
v1.0.0
Initial release of weibo-hot-daily: - ่‡ชๅŠจๆŠ“ๅ–ๅพฎๅš็ƒญๆœๆฆœ Top 50๏ผŒๆ”ฏๆŒAIๆ™บ่ƒฝๆ‘˜่ฆ็”Ÿๆˆ๏ผˆๆŒ‰ๅˆ†็ฑป๏ผ‰ใ€‚ - ๆ”ฏๆŒๆŽจ้€่‡ณ Telegramใ€ๅพฎไฟกใ€้‚ฎไปถ็ญ‰ๅคšๆธ ้“๏ผŒๅŠๆฏๆ—ฅๅฎšๆ—ถ่‡ชๅŠจๆ‰ง่กŒใ€‚ - ๆไพ›็ƒญๅบฆๆŽ’ๅๅ˜ๅŒ–็ปŸ่ฎกไธŽ่พ“ๅ‡บๅคš็งๆ ผๅผ๏ผˆJSON/CSV๏ผ‰ใ€‚ - ๅŸบไบŽ่‡ชๅฎšไน‰ๅ‚ๆ•ฐ๏ผŒๅฏ็ญ›้€‰ๅˆ†็ฑปใ€ๆŒ‡ๅฎš่พ“ๅ‡บๆ–นๅผ๏ผŒๅนถ้›†ๆˆOpenAI API Key็”จไบŽๆ‘˜่ฆ็”Ÿๆˆใ€‚ - ๅ…่ดน็‰ˆ/Pro็‰ˆๅŠŸ่ƒฝๅŒบๅˆ†๏ผŒๆœ‰่ฏฆ็ป†ๅฎ‰่ฃ…ไธŽ็”จๆณ•่ฏดๆ˜Žใ€‚
Metadata
Slug weibo-hot-daily
Version 2.1.1
License MIT-0
All-time Installs 1
Active Installs 1
Total Versions 7
Frequently Asked Questions

What is Weibo Hot Daily?

๐Ÿ”ฅ ๆฏๆ—ฅ่‡ชๅŠจๆŠ“ๅ–ๅพฎๅš็ƒญๆœๆฆœ๏ผŒๆ”ฏๆŒAIๆ‘˜่ฆๅ’Œๅคšๆธ ้“ๆŽจ้€ใ€‚่‡ชๅช’ไฝ“่ฟ่ฅๅฟ…ๅค‡๏ผๅ…่ดนไฝฟ็”จ๏ผŒๅฎšๅˆถๅผ€ๅ‘่ฏท่”็ณปไฝœ่€…ใ€‚ It is an AI Agent Skill for Claude Code / OpenClaw, with 174 downloads so far.

How do I install Weibo Hot Daily?

Run "/install weibo-hot-daily" in the OpenClaw or Claude Code chat to install it in one step โ€” no extra setup required.

Is Weibo Hot Daily free?

Yes, Weibo Hot Daily is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does Weibo Hot Daily support?

Weibo Hot Daily is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Weibo Hot Daily?

It is built and maintained by ่“ๅคฉ (@qq853632587); the current version is v2.1.1.

๐Ÿ’ฌ Comments