Description

豆瓣电影/书籍/影人/用户收藏查询与标记 CLI。触发词：豆瓣、电影推荐、热门电影、想看什么、top250、美剧日剧韩剧、影评短评、标记看过、评分、好书推荐、书籍、豆列、关注、导出观影记录、影人、演员导演。

README (SKILL.md)

douban-cli

Name: Douban CLI
Author: marvae

豆瓣电影/书籍/影人/用户收藏查询与标记命令行工具。

场景指引

根据用户意图选择合适的命令：

用户意图	推荐命令
"最近有啥好看的" / "推荐电影"	`douban hot` 或 `douban weekly`
"经典电影推荐" / "必看电影"	`douban top250`
"有什么美剧/日剧/韩剧"	`douban tv 美剧` / `日剧` / `韩剧`
"想看科幻/动作/悬疑片"	`douban rank 科幻` / `动作` / `悬疑`
"XX电影怎么样" / "介绍一下XX"	先 `douban search XX` 拿 ID，再 `douban movie \x3Cid>`
"XX电影评价如何"	`douban comments \x3Cid>` 看短评，`douban reviews \x3Cid>` 看长评
"XX是谁演的" / "这个导演还拍过什么"	`douban celebrity \x3Cid>`
"有什么好书"	`douban book hot`
"这本书怎么样"	`douban book search XX`，再 `douban book info \x3Cid>`
"我看过的电影" / "我的片单"	`douban me`（需登录）
"帮我标记看过/想看"	`douban mark \x3Cid> --watched` / `--wish`（需登录）
"导出我的观影记录"	`douban export --format csv -o records.csv`（需登录）

常见工作流

查一部电影的完整信息：

douban search 盗梦空间          # 拿到 ID（如 3541415）
douban movie 3541415            # 看详情
douban rating 3541415           # 看评分分布
douban comments 3541415         # 看热门短评
douban reviews 3541415          # 看热门影评

批量标记/评分（从文件读取）：

douban mark --file ids.txt --wish              # 批量标记想看（每行一个 ID）
douban rate --file scores.txt --delay 3        # 批量评分（每行: ID,分数）
douban comment --file comments.txt --delay 3   # 批量短评（每行: ID,评论内容）

命令参考

浏览（无需登录）

命令	说明
`douban hot`	热门电影
`douban hot --tv`	热门剧集（综合）
`douban tv 美剧`	分类剧集。可选：美剧、英剧、日剧、韩剧、国产剧
`douban rank 科幻`	类型排行。可选：科幻、动作、爱情、悬疑、喜剧、恐怖、动画等
`douban top250`	豆瓣 Top 250
`douban now`	正在热映。`-c 上海` 指定城市
`douban coming`	即将上映
`douban weekly`	一周口碑榜
`douban search \x3C关键词>`	搜索电影
`douban movie \x3Cid或片名>`	电影详情。支持数字 ID 或片名（片名会自动搜索匹配）
`douban comments \x3Cid>`	热门短评。`--latest` 按时间排序
`douban reviews \x3Cid>`	热门影评
`douban rating \x3Cid>`	评分分布（星级柱状图）
`douban celebrity \x3Cid>`	影人详情（演员/导演）

书籍（无需登录）

命令	说明
`douban book hot`	热门书籍 Top 250
`douban book search \x3C关键词>`	搜索书籍
`douban book info \x3Cid>`	书籍详情

用户与配置

命令	说明	需登录
`douban user \x3CuserId>`	查看用户片单	否
`douban me`	我的片单	是
`douban config --user \x3Cid>`	设置默认用户 ID	否

命令	说明
`douban login`	登录（自动从浏览器提取 Cookie，支持 Chrome/Edge/Firefox/Safari）
`douban whoami`	查看当前登录用户
`douban logout`	退出登录

标记（需登录）

命令	说明
`douban mark \x3Cid> --wish`	标记想看
`douban mark \x3Cid> --watched`	标记看过
`douban mark \x3Cid> --watching`	标记在看
`douban unmark \x3Cid>`	取消标记
`douban rate \x3Cid> --score \x3C1-5>`	评分（1-5 星）
`douban comment \x3Cid> "评论内容"`	发布短评
`douban review \x3Cid> "标题" "正文"`	发布长评

社交与统计（需登录）

命令	说明
`douban feed`	关注动态
`douban stats --year 2024`	年度观影统计
`douban export -o records.csv -f csv`	导出记录。格式：json（默认）/ csv
`douban follow \x3CuserId>`	关注用户
`douban unfollow \x3CuserId>`	取消关注

通用选项

选项	说明
`--json`	以 JSON 格式输出，便于程序处理
`--limit N` / `-n N`	控制返回数量
`--start N` / `-s N`	分页偏移（从 0 开始）
`--delay \x3C秒>`	批量操作的请求间隔，避免触发反爬（默认随机 1-2 秒）

故障排除

问题	解决方式
"反爬挑战" 错误	豆瓣临时封禁，等几分钟后重试，或降低请求频率（加大 `--delay`）
"ck token" / 登录失效	通常会自动重试刷新。若仍失败，再运行 `douban logout` 然后 `douban login`
搜索无结果	尝试更短的关键词，或直接用豆瓣 ID
"未配置默认用户"	运行 `douban login` 或 `douban config --user \x3Cid>`
批量操作部分失败	检查输出的错误信息，常见原因：ID 不存在、评分不在 1-5 范围、重复标记

Usage Guidance

This skill appears to do what it says: it installs an npm 'douban' CLI that reads browser cookies to log you into Douban and stores local config/auth files. Before installing, consider: 1) Trust the npm package and maintainer (@marvae24) — inspect the package source on the registry or GitHub if possible. 2) Browser-cookie access is sensitive — confirm the tool only extracts Douban-specific cookies and not unrelated site tokens. 3) If you have concerns, run the tool in an isolated environment or container, or use explicit credentials instead of cookie extraction. 4) After installation, review ~/.douban-cli-auth.json and ~/.douban-cli.json and monitor network activity if you want extra assurance.

Capability Analysis

Type: OpenClaw Skill Name: douban-cli Version: 0.2.5 The douban-cli skill (package @marvae24/douban-cli) requests the high-risk 'browser-cookies' permission in SKILL.md to extract authentication tokens from Chrome, Edge, Firefox, and Safari. While this capability is plausibly needed for the stated purpose of managing Douban user collections without an official API, the broad access to browser data is a significant security risk. No explicit evidence of malicious exfiltration was found in the provided metadata, but the credential extraction mechanism is inherently sensitive.

Capability Assessment

✓ Purpose & Capability

Name/description (Douban CLI) match the declared binary 'douban' and the npm install @marvae24/douban-cli. Commands and config paths in SKILL.md align with a CLI that queries and marks Douban content.

ℹ Instruction Scope

Runtime instructions focus on search/browse/mark/export operations and batch file workflows. They explicitly state the CLI will extract Douban login state from browser cookies and write local config/auth files (~/.douban-cli.json, ~/.douban-cli-auth.json). Those actions are within scope for a CLI that needs to authenticate, but extracting browser cookies is sensitive and worth scrutiny.

ℹ Install Mechanism

Install is an npm package (@marvae24/douban-cli) that provides the 'douban' binary—this is an expected and common distribution method for a CLI. NPM installs carry the usual moderate risk (third-party code executed on your machine); no suspicious download URLs or archive extraction are present in the spec.

ℹ Credentials

No environment variables are requested (ok). The skill requests permission to read browser cookies (Chrome/Edge/Firefox/Safari) to extract Douban login state and will store encrypted auth cache in the home directory. Reading browser cookies is disproportionally sensitive if the tool reads entire cookie stores or other sites' cookies; the SKILL.md states the intent (extract Douban cookies), which makes it justifiable but still sensitive.

✓ Persistence & Privilege

The skill is not always-enabled, does not request system-wide config changes, and stores only its own config/auth files under the user's home. Autonomous invocation (agent can invoke) is the platform default; combined with browser-cookie access this increases potential impact if misused, but there is no evidence here the skill abuses persistence or privileges.

Version History

v0.2.5

完善文档：场景指引、命令参考、故障排除；声明 browser-cookies 权限和配置文件

v0.2.4

声明 browser-cookies 权限和配置文件路径

v0.2.3

添加 metadata 声明 npm 依赖

v0.2.2

同步 repo SKILL.md，完善命令文档和触发词

v0.2.1

添加 metadata 声明 npm 依赖

v0.2.0

v0.2.0: 全面 code review 修复，spinner 动画，分页支持，ck 缓存，反爬检测

v0.1.0

Initial release - 豆瓣电影/书籍/用户收藏查询

Metadata

Slug douban-cli

Version 0.2.5

License MIT-0

All-time Installs 1

Active Installs 1

Total Versions 7

Frequently Asked Questions

What is Douban CLI?

豆瓣电影/书籍/影人/用户收藏查询与标记 CLI。触发词：豆瓣、电影推荐、热门电影、想看什么、top250、美剧日剧韩剧、影评短评、标记看过、评分、好书推荐、书籍、豆列、关注、导出观影记录、影人、演员导演。 It is an AI Agent Skill for Claude Code / OpenClaw, with 316 downloads so far.

How do I install Douban CLI?

Run "/install douban-cli" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Douban CLI free?

Yes, Douban CLI is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does Douban CLI support?

Douban CLI is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Douban CLI?

It is built and maintained by m3 (@marvae); the current version is v0.2.5.

More Skills

Douban CLI