← 返回 Skills 市场
qq853632587

Weibo Hot Daily

作者 蓝天 · GitHub ↗ · v2.1.1 · MIT-0
cross-platform ⚠ suspicious
174
总下载
0
收藏
1
当前安装
7
版本数
在 OpenClaw 中安装
/install weibo-hot-daily
功能描述
🔥 每日自动抓取微博热搜榜,支持AI摘要和多渠道推送。自媒体运营必备!免费使用,定制开发请联系作者。
安全使用建议
Do not run this script blindly on sensitive systems. Specific things to consider before installing or running: 1) The script contains a hard-coded Weibo SUB cookie (a session credential) — treat this as sensitive; prefer the author remove it and require the user to provide credentials via environment variables or a config file. 2) Many advertised features (multi-channel push, scheduling, full AI summaries) are not implemented in the provided code — ask the author for clarification or full source before trusting claims. 3) If you plan to use AI features, supply API keys via secure env vars (not command-line history) and confirm how the key is used. 4) Run any untrusted script in a sandbox/container and inspect network requests (to ensure no unexpected endpoints). 5) Verify the source repository and author identity (the package metadata and homepage should match a real repo) and confirm compliance with Weibo's terms. If you cannot verify or the author does not remove the hard-coded cookie, consider this skill unsafe to run with sensitive accounts.
功能分析
Type: OpenClaw Skill Name: weibo-hot-daily Version: 2.1.1 The skill is a functional tool for fetching Weibo hot search data via the platform's public AJAX API. The code in fetch_hot.py implements standard scraping logic, including data parsing and export to JSON/CSV. While it includes a hardcoded session cookie (common in scrapers to bypass basic bot detection) and a static os.system call to set Windows console encoding, these behaviors are non-malicious and directly support the stated purpose. No evidence of data exfiltration, unauthorized execution, or prompt injection was found.
能力评估
Purpose & Capability
The name/description promise AI summaries, multi-channel push, and scheduled daily runs, but the shipped code only fetches hot topics and optionally writes JSON/CSV and a simple summary. The code includes a hard-coded 'Cookie' header (a SUB session cookie) embedded in Weibo request headers — that is effectively a credential baked into the script even though the skill declares no required environment variables or credentials. The presence of an embedded session cookie is disproportionate and unexpected for a simple fetch script.
Instruction Scope
SKILL.md instructs users to run python3 fetch_hot.py and examples show --summary usage, but it does not mention the embedded cookie or how credentials should be handled. The README/SKILL advertise multi-channel push and scheduled automation, but no push/scheduling code is present. The script accepts an --api-key flag (for an OpenAI key) and contains a TODO for OpenAI integration, yet the documentation doesn't explain how to supply or protect such keys; this is inconsistent and grants the agent (or user) little guidance about sensitive inputs.
Install Mechanism
There is no install spec and the skill is instruction+script only; required binary is python3 which is coherent. This lowers installation risk since nothing is downloaded or extracted by the skill installer. One oddity: package.json lists a 'python' dependency (a Node-style dependency declaration) which is not meaningful for runtime but is not a direct install-time risk.
Credentials
The skill declares no required environment variables, yet the code embeds a Weibo session cookie directly in headers (a sensitive credential). It also supports an --api-key argument for AI features but does not declare or recommend using an env var for it. Hard-coding credentials in code is disproportionate and risky; proper design would accept sensitive tokens via environment variables or secure config.
Persistence & Privilege
The skill does not request always:true or any elevated persistence. It does not modify other skills or system settings. Autonomous invocation is permitted by default (not flagged here) but the skill itself does not claim persistent/system-wide privileges.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install weibo-hot-daily
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /weibo-hot-daily 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v2.1.1
添加免责声明,明确数据来源和使用限制
v2.1.0
v2.1: 优化API稳定性,改善数据展示
v2.0.0
v2.0: 修复中文乱码,优化输出格式
v1.0.3
添加邮箱联系方式
v1.0.2
更新联系方式:QQ 2595075878
v1.0.1
添加定制服务联系方式
v1.0.0
Initial release of weibo-hot-daily: - 自动抓取微博热搜榜 Top 50,支持AI智能摘要生成(按分类)。 - 支持推送至 Telegram、微信、邮件等多渠道,及每日定时自动执行。 - 提供热度排名变化统计与输出多种格式(JSON/CSV)。 - 基于自定义参数,可筛选分类、指定输出方式,并集成OpenAI API Key用于摘要生成。 - 免费版/Pro版功能区分,有详细安装与用法说明。
元数据
Slug weibo-hot-daily
版本 2.1.1
许可证 MIT-0
累计安装 1
当前安装数 1
历史版本数 7
常见问题

Weibo Hot Daily 是什么?

🔥 每日自动抓取微博热搜榜,支持AI摘要和多渠道推送。自媒体运营必备!免费使用,定制开发请联系作者。 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 174 次。

如何安装 Weibo Hot Daily?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install weibo-hot-daily」即可一键安装,无需额外配置。

Weibo Hot Daily 是免费的吗?

是的,Weibo Hot Daily 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

Weibo Hot Daily 支持哪些平台?

Weibo Hot Daily 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Weibo Hot Daily?

由 蓝天(@qq853632587)开发并维护,当前版本 v2.1.1。

💬 留言讨论