← 返回 Skills 市场
Zhihu CLI
作者
lightislost
· GitHub ↗
· v1.0.0
610
总下载
0
收藏
1
当前安装
1
版本数
在 OpenClaw 中安装
/install zhihu-cli
功能描述
Command-line tool for searching, reading, and interacting with Zhihu (知乎). Supports hot topics, content search, article reading, user info, and Browser Relay...
安全使用建议
Before installing or running this CLI, verify the npm package source and inspect its code: find the package author, repository, and homepage on npm. Understand exactly how 'zhihu login' extracts cookies (which browser files it reads) and whether cookies are stored or transmitted elsewhere; storing cookies in plain files (~/.zhihu-cookie) risks credential theft. Prefer safer authentication methods (OAuth or token-based) if available. If you must try it, run the npm package in an isolated environment (VM or disposable container), and do not use accounts with sensitive access. Ask the publisher for the package repository link and a detailed explanation of cookie handling and Browser Relay behavior; absence of those answers increases risk.
功能分析
Type: OpenClaw Skill
Name: zhihu-cli
Version: 1.0.0
The zhihu-cli skill documentation (SKILL.md) describes a tool that performs high-risk credential handling, specifically the automated extraction of authentication cookies from the Chrome browser and storing them in a local file (~/.zhihu-cookie). While these features are aligned with the stated purpose of interacting with the Zhihu platform, the automated extraction of browser data and the instructions for the agent to execute JavaScript via 'Browser Relay' for voting and following actions represent a significant security risk and potential for account misuse.
能力评估
Purpose & Capability
The skill claims to be a CLI for Zhihu which plausibly needs authentication, but the SKILL.md promotes an npm package that 'auto-extracts cookies from Chrome' and stores them in ~/.zhihu-cookie. The skill metadata declares no required config paths or credentials, so the implied need to access browser cookie stores is not documented or justified.
Instruction Scope
Runtime instructions tell users to npm install (or npx) an external package and to run 'zhihu login' which 'opens Chrome and extracts cookies automatically'. The docs also advise storing cookies in ~/.zhihu-cookie and include JS snippets for Browser Relay to click buttons. These steps involve reading sensitive local browser data and executing JS in a browser context—actions outside a simple read/search use-case and not fully explained.
Install Mechanism
There is no install spec bundled with the skill; SKILL.md instructs installing from the public npm registry (npm install -g zhihu-cli or npx). Installing an unvetted npm package from an unknown source (no homepage, no repository listed) is moderate-to-high risk because the package could perform arbitrary actions (including cookie extraction/exfiltration).
Credentials
The skill requests no environment variables but instructs handling of sensitive credentials (browser cookies) and persistent storage (~/.zhihu-cookie). Sensitive access is implied but not declared. There is no explanation about file protections, encryption, or what the cookie file contains/is used for—this is disproportionate to the metadata provided.
Persistence & Privilege
The skill does not request always:true, does not claim to modify other skills or system-wide configs, and is user-invocable. No elevated platform-level privileges are requested in the metadata.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install zhihu-cli - 安装完成后，直接呼叫该 Skill 的名称或使用
/zhihu-cli触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
Initial release
元数据
常见问题
Zhihu CLI 是什么？
Command-line tool for searching, reading, and interacting with Zhihu (知乎). Supports hot topics, content search, article reading, user info, and Browser Relay... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 610 次。
如何安装 Zhihu CLI？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install zhihu-cli」即可一键安装，无需额外配置。
Zhihu CLI 是免费的吗？
是的，Zhihu CLI 完全免费（开源免费），可自由下载、安装和使用。
Zhihu CLI 支持哪些平台？
Zhihu CLI 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Zhihu CLI？
由 lightislost（@lightislost）开发并维护，当前版本 v1.0.0。
推荐 Skills