Operate Weibo via browser automation for composing posts, publishing content, replying to comments, checking mentions, and monitoring basic account metrics....
Security Analysis
high confidenceThe skill's requested actions, resources, and instructions match its stated purpose (browser automation for Weibo) and it does not request unrelated credentials or installs.
Name/description (Weibo browser automation for posting, replying, checking metrics) align with the SKILL.md which instructs opening Weibo pages, composing/publishing posts, replying, and reading visible metrics; no unrelated services, binaries, or credentials are requested.
Runtime instructions are scoped to browser automation of Weibo workflows (open pages, snapshot+act, ask for confirmation before publish/delete, pause on CAPTCHA). They do not instruct the agent to read arbitrary files, request unrelated environment variables, or exfiltrate data to other endpoints.
Instruction-only skill with no install spec or code files. No downloads, package installs, or disk writes are declared — lowest-risk install mechanism.
No environment variables, credentials, or config paths are required. The SKILL.md asks the user to perform login/verification interactively rather than requesting stored credentials, which is proportionate for a browser-automation account manager.
always is false and there are no statements about modifying other skills or system-wide settings. The skill can be invoked autonomously by the agent (platform default), which is expected for skills that perform actions; the SKILL.md also requires explicit confirmation before irreversible actions.
Guidance
This skill appears coherent with its stated purpose, but it will control a browser session and perform actions on whatever Weibo account is logged in. Before installing or using: 1) Only use while you (the user) are present to complete logins/2FA—do not paste credentials into prompts for the agent. 2) Confirm the skill asks for explicit confirmation before any publish/delete and test that behavior. 3) Try it first with a secondary/test account. 4) Be aware snapshots may capture page content (including sensitive info in the DOM or images); avoid exposing other accounts or data in the browser session. 5) Monitor account activity and revoke sessions or tokens if you see unexpected actions.
Latest Release
v0.1.0
Initial release: browser-based Weibo operations workflow
More by @YIKAILucas
Published by @YIKAILucas on ClawHub
