WeRead Book Finder

输入图书名称，优先在微信读书搜索并加入书架；若微信读书没有可信命中或无法加入书架，则自动回退到 Z-Library 搜索并优先下载非 PDF 格式。适用于“把《xxx》加入微信读书书架，不行就去 Z-Library 下载”这类请求。

This skill appears to do what it says (automate WeRead and, if necessary, search/download from Z‑Library), but consider the following before using it: - Privacy: the tool recommends reusing a Playwright user_data_dir (browser profile). Do NOT point it at a profile that contains other accounts or sensitive sessions; create a dedicated profile directory to avoid exposing unrelated cookies/session tokens. - Downloads and legality: the fallback is Z‑Library, a piracy-associated site. Ensure you understand the legal/privacy implications of downloading content from that source in your jurisdiction. - Sandbox and inspection: run the script in a controlled environment (VM/container) and inspect the code yourself if possible. The code shown performs browser automation and file writes; there are no hidden network endpoints in the provided snippet, but the script will access weread.qq.com and z-lib.by as intended. - Files and storage: downloads go to ~/Downloads/OpenClaw-Books by default; change that path if you want a different location or stricter access controls. - Dependencies: install Playwright and its browser binaries via the documented commands; avoid running arbitrary prebuilt binaries from unknown hosts. If you plan to use this skill, create a fresh browser profile directory just for it, review the full script (including the truncated portion) before running, and run it in an environment where accidental exposure or misuse of other accounts is unlikely.

Type: OpenClaw Skill Name: weread-book-finder Version: 1.0.1 The skill bundle is a legitimate automation tool for finding and acquiring books from WeChat Reading and Z-Library. The Python script `scripts/find_book.py` uses Playwright to simulate user searches, manage login sessions via persistent browser profiles, and handle file downloads to a local directory (~/Downloads/OpenClaw-Books). The code logic is transparent, matches the documentation in `SKILL.md`, and contains no evidence of data exfiltration, malicious execution, or prompt injection.