← 返回 Skills 市场
21251
总下载
13
收藏
0
当前安装
7
版本数
在 OpenClaw 中安装
/install juejin-skills
功能描述
掘金技术社区一站式操作技能，支持热门文章排行榜查询、Markdown 文章发布（默认草稿）和文章下载保存为 Markdown。
安全使用建议
Install only if you trust this publisher with your Juejin account session. Use it on a personal machine, avoid shared or CI environments, keep public publishing in draft-only mode unless intentionally confirming publication, and delete ~/.juejin_cookie.json when finished. Treat the lower-level Python API as unsafe for untrusted callers until URL validation, cookie-path constraints, redirect handling, and the vulnerable lxml pin are fixed.
能力评估
Credentials
Network access, browser automation, local Markdown reads, and output writes fit the purpose. The concerns are that image downloads follow redirects after only initial host allowlisting, and the authenticated HTTP client lacks destination validation.
Install Mechanism
Installation is ordinary Python dependency installation plus Playwright Chromium setup. A pinned lxml dependency was flagged as vulnerable, which is a dependency hygiene concern rather than evidence of malicious installation behavior.
Instruction Scope
SKILL.md provides narrow activation rules, explicit user-input requirements, draft-only defaults, bulk-download confirmation, and warnings around credentials. These controls are clear, but they rely on callers using the higher-level workflows rather than the lower-level public API escape hatches.
Persistence & Privilege
The skill clearly discloses persistent storage of the Juejin session cookie at ~/.juejin_cookie.json with 0600 permissions and removal guidance. The configurable cookie_path in JuejinAuth can nevertheless write or delete arbitrary caller-selected writable paths, which exceeds the advertised credential-file scope.
Purpose & Capability
The stated purpose is coherent: query Juejin, create drafts or publish articles, and download Juejin articles. However, the exported JuejinAPI can send an authenticated Cookie header to any caller-supplied URL, which exceeds the declared Juejin-only network boundary.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install juejin-skills - 安装完成后，直接呼叫该 Skill 的名称或使用
/juejin-skills触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.8
重新发布1.0.7版本的安全修复：./output写边界守卫(_validate_output_dir) + download_user_articles双重确认门(confirm_bulk=True) + 批量硬上限BULK_DOWNLOAD_HARD_CAP=50；SKILL.md声明bulk_download_policy
v1.0.7
修复Scope Creep与Description-Behavior Mismatch：downloader增加_validate_output_dir写边界守卫(./output / $JUEJIN_OUTPUT_ROOT)，download_user_articles增加confirm_bulk双重确认与硬上限50，SKILL.md声明bulk_download_policy并修正filesystem_write边界声明
v1.0.6
修复MCP最小权限问题：publisher增加.md路径白名单与大小限制，SKILL.md声明filesystem_read权限并收紧触发关键词，移除一键发布等模糊措辞
v1.0.5
修复安全漏洞：添加图片下载域名白名单限制，缩小技能触发关键词范围
v1.0.2
**Version 1.0.2 changelog (juejin-skills):**
- Enhanced SKILL.md metadata with version, source, homepage, author, and repository information.
- Clarified authentication file security: explicitly sets cookie file permissions to 0600 and documents security practices.
- Added strict public publish safeguards: API and CLI now require multiple explicit confirmations for publishing articles publicly; defaults remain draft-only.
- Updated credential and permission descriptions with more detailed hardening, file format, and ignore list notes.
- No core functionality changes to the main publishing, download, or ranking features.
v1.0.1
**Changelog for juejin-skills v1.0.1**
- Added explicit credentials, permissions, and publish policy declarations in SKILL.md for enhanced security and transparency.
- The skill now documents how the juejin login session cookie is stored, its permissions, and instructions for revocation.
- Declares required permissions for network, local write (for cookies and downloads), and browser automation in SKILL.md.
- Default publish behavior is set to draft-only, with explicit user confirmation needed for public article publishing.
- No functional or API changes to skill logic; updates focus on credential and permission handling documentation.
v1.0.0
Juejin Skills 1.0.0 – Initial Release
- Query trending articles, category rankings, and article categories from Juejin.
- One-click publish Markdown articles to Juejin, including login support via Playwright.
- Download and save Juejin articles (single or batch) as Markdown, with image and metadata support.
- Natural language command support for all main actions.
元数据
常见问题
掘金技能集 是什么？
掘金技术社区一站式操作技能，支持热门文章排行榜查询、Markdown 文章发布（默认草稿）和文章下载保存为 Markdown。 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 21251 次。
如何安装 掘金技能集？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install juejin-skills」即可一键安装，无需额外配置。
掘金技能集 是免费的吗？
是的，掘金技能集 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
掘金技能集 支持哪些平台？
掘金技能集 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 掘金技能集？
由 enoyao（@wscats）开发并维护，当前版本 v1.0.8。
推荐 Skills