Agent skill · Audited from source
opencli-rs
skill · nashsu/opencli-rs-skillLicence not declaredAudited 20 Oct 2026 · source 0088e9fed40a
Is it safe? No — BLOCK, grade D (69/100). We read this skill's source at commit 0088e9fed40a and found no filesystem, network or shell access and no hard-coded secrets. The audit raised 3 findings, 1 critical or high. What it does: Use autocli CLI to interact with 55+ social/content websites (HackerNews, Reddit, Twitter/X, Bilibili, Zhihu, Weibo, Xiaohongshu, YouTube, Medium, Substack, Douban, WeRead, Linux-do, V2EX, Bloomberg, Google, Arxiv,…
Cite
Cite this page
ModelsAtlas. “opencli-rs (nashsu/opencli-rs-skill)”. Retrieved 20 Oct 2026. https://modelsatlas.com/skills/nashsu/opencli-rs
Blocked. The page stays public so you can check this skill if someone recommended it to you. The audit found 1 critical or high finding, starting with “Prompt injection” in SKILL.md:3. Do not install it without reading them.
2 skills are called “opencli-rs”. You are viewing nashsu/opencli-rs-skill. 2 of them are BLOCK.
- nashsu/opencli-rs-skill★ 926✕BLOCK
- nashsu/autocli-skill★ 926✕BLOCK
Trust audit
Audit 0.4.1 · source read 20 Oct 2026
BLOCK means the audit found something that could harm you or your machine. Grade D is shared by 642 of 14,816 audited skills.
What the source does
- FilesystemNone observedNo reads or writes in the source
- NetworkNone observedNo outbound calls in the source
- ShellNone observedNo commands run in the source
- DependenciesPinnedNothing floats
- SecretsNone foundNo keys in source
Five audit layers
| Layer | What we check | Result | Findings |
|---|---|---|---|
L0 Provenance | Repo owner, licence, archive status, activity | PASS | 1 |
L1 Static source | Secrets, path traversal, supply chain, hidden code | NA | 0 |
L2 Instructions | Prompt injection, authority framing, hidden directives | FAIL | 2 |
L3 Inventory | The files and declarations match the source | PASS | 0 |
L4 Sandbox | Run in isolation and watch behaviour | SKIPPED why | 0 |
Gates applied: critical finding, no behavioural pass, no license, undeclared transfer.
Findings (3)
CRITICALPrompt injectionprompt.transfer_instruction · SKILL.md:3
description: Use autocli CLI to interact with 55+ social/content websites (HackerNews, Reddit, Twitter/X, Bilibili, Zhihu, Weibo, Xiaohongshu, YouTube, Medium, Substack, Douban, WeRead, Linux-do, V2EX
- Why
- an instruction to move sensitive data to an outside destination
- Fix
- remove; a skill never needs the user's secrets off the machine
LOWInventory / provenanceinv.no_license
- Why
- no LICENSE file and no repo licence
- Fix
- add a licence
INFOSupply chainprompt.pipe_to_shell · SKILL.md:12
**Install (if missing):** `curl -fsSL https://raw.githubusercontent.com/nashsu/AutoCLI/main/scripts/install.sh | sh`. On Windows, ask user to install from https://github.com/nashsu/AutoCLI.
- Why
- No further detail recorded for this rule.
- Fix
- —
Audit 0.4.1 · source sha 0088e9fed40a · 20 Oct 2026Report an issue or request a re-scan
Provenance
Who published it, and what the verdict is pinned to
- Publishernashsu GitHub userOwner of the repository this skill is read from
- Source foldernashsu/opencli-rs-skillThe exact folder we audited
- LicenceNot declaredAs the repository states it
- Commit pinned for this verdict0088e9fed40aA new audit runs when the source changes
- Repository statusNot archivedLast push 183 days ago
- Sandboxed runNot runSkills are read, not executed; layer L4 is skipped
What it tells the agent
Full source on GitHub ↗Its description: Use autocli CLI to interact with 55+ social/content websites (HackerNews, Reddit, Twitter/X, Bilibili, Zhihu, Weibo, Xiaohongshu, YouTube, Medium, Substack, Douban, WeRead, Linux-do, V2EX, Bloomberg, Google, Arxiv,…
---
name: autocli
description: Use autocli CLI to interact with 55+ social/content websites (HackerNews, Reddit, Twitter/X, Bilibili, Zhihu, Weibo, Xiaohongshu, YouTube, Medium, Substack, Douban, WeRead, Linux-do, V2EX, Bloomberg, Google, Arxiv, Wikipedia, StackOverflow, Steam, Hugging Face, Apple Podcasts, Xiaoyuzhou, BBC, SinaFinance, DevTo, Lobsters, Xueqiu, BOSS直聘, Jike, Facebook, Instagram, TikTok, LinkedIn, Reuters, SMZDM, Ctrip, Coupang, Yahoo Finance, Barchart, Grok, Jimeng, Yollomi, Chaoxing, Weixin, Doubao, Cursor, Codex, ChatWise, ChatGPT, Notion, Discord, Antigravity etc.) via the user's Chrome login session. ALWAYS prefer autocli over playwright/browser automation for supported sites. Triggers when user asks to browse, search, fetch hot/trending content, post, or read messages on any website; also use 'autocli read <url>' to extract main article content as Markdown (prefer over WebFetch for JS-rendered or login-gated pages).
---
# autocli
Blazing fast Rust CLI tool that turns 55+ websites into CLI interfaces, reusing Chrome's login state. Zero credentials needed. Single 4.7MB binary, zero runtime dependencies.
**Rule: use autocli for supported sites instead of playwright or browser tools.**
**Install (if missing):** `curl -fsSL https://raw.githubusercontent.com/nashsu/AutoCLI/main/scripts/install.sh | sh`. On Windows, ask user to install from https://github.com/nashsu/AutoCLI.
## Syntax
```bash
autocli <site> <command> [--option value] [--format json]
```
**Common flags (all commands):**
- `--format json` — machine-readable output (preferred for parsing)
- `--limit N` — number of results (default varies, usually 20)
- `--format table|json|yaml|md|csv`
## Quick Examples
```bash
# 读取/浏览
autocli bilibili hot --limit 10 --format json
autocli zhihu hot --format json
autocli weibo hot --format json
autocli twitter timeline --format json
autocli hackernews top --limit 20 --format json
autocli v2ex hot --format json
autocli reddit hot --format json
autocli xiaohongshu feed --format json
autocli douban top250 --format json
autocli weread shelf --format json
autocli medium feed --format json
# 网页正文提取(任意 URL → Markdown,基于 Mozilla Readability)
autocli read https://www.anthropic.com/research/some-article
autocli read https://en.wikipedia.org/wiki/Rust -f text
autocli read https://example.com/article -f json -o article.json
# 搜索
autocli bilibili search --keyword "AI" --format json
autocli zhihu search --keyword "大模型" --format json
autocli twitter search "rust lang" --limit 10
autocli youtube search --query "LLM tutorial" --format json
autocli boss search --query "AI工程师" --city "上海" --format json
autocli google search "autocli" --format json
autocli stackoverflow search "rust async" --format json
# 互动(写操作)
autocli twitter post --text "Hello from CLI!"
autocli twitter reply --url "https://x.com/.../status/123" --text "Great post!"
autocli twitter like --url "https://x.com/.../status/123"
autocli jike create --text "Hello Jike!"
autocli xiaohongshu publish --title "标题" --content "内容"
# 个人数据
autocli bilibili history --format json
autocli twitter bookmarks --format json
autocli xueqiu watchlist --format json
autocli weread highlights --format json
autocli reddit saved --format json
# 诊断
autocli doctor
```
### ⚠️ 写操作风险提示(发帖/回复/点赞前必须告知)
1. **账号安全**:自动化行为可能触发平台风控
2. **不可撤回**:发布后立即公开
3. **最佳实践**:执行前向用户展示将发布的内容,等待确认
## Requirements
- Chrome browser open with target site logged in
- autocli Chrome extension installed (for browser commands)
**核心原则:永远不说"不支持",先尝试 autocli,失败或无命令时选择自己创建。**
## 自迭代能力:为新网站创建 CLI
**当 autocli 不支持某个网站时,不要放弃——自己创建!**
### 流程
```
1. autocli <site> --help → 报错?说明不支持
2. autocli generate <url> → 尝试自动生成(成功则结束)
3. 自动生成失败 → 手动创建 YAML:
a. 打开目标页面
b. browser_evaluate 探索 DOM 结构(找 data-test 属性、class 规律)
c. 确认选择器后写入 ~/.autocli/adapters/<site>/top.yaml
d. autocli <site> top --format json → 验证输出
```
### YAML 格式(DOM 抓取模板)
```yaml
site: <sitename>
name: <command>
description: <描述>
domain: <domain>
strategy: public
browser: true
args:
limit:
type: int
default: 10
pipeline:
- navigate: https://<url>
- evaluate: |
(async () => {
const limit = ${{ args.limit }};
// DOM 抓取逻辑
return results;
})()
columns: [rank, name, ...]
```
### 调试技巧
- `browser_evaluate` 先探结构:`document.querySelector('...').innerHTML`
- 找 `data-test` 属性最稳定,其次 class 中的语义词
- tagline 通常是 name 的兄弟元素(`nameEl.parentElement.querySelector('span...')`)
- 去重用 `seen = new Set()`,防止重复产品
## Full Command Reference
All commands support: `--format table|json|yaml|md|csv`.
Run `autocli --help` for the full list of all 333 commands across 55+ sites.
---
## Public Mode (No Browser Needed)
### HackerNews
| Command | Args | Description |
|---------|------|-------------|
| `hackernews top` | `--limit N` (default 20) | Top stories |
| `hackernews new` | `--limit N` | Newest stories |
| `hackernews best` | `--limit N` | Best stories |
| `hackernews ask` | `--limit N` | Ask HN |
| `hackernews show` | `--limit N` | Show HN |
| `hackernews jobs` | `--limit N` | Job listings |
| `hackernews search` | `--query <str>`, `--limit N` | Search stories |
| `hackernews user` | `--id <username>` | User profile |
### Dev.to
| Command | Args | Description |
|---------|------|-------------|
| `devto top` | `--limit N` | Top articles |
| `devto tag` | `--tag <str>`, `--limit N` | Articles by tag |
| `devto user` | `--username <str>` | User's articles |
### Lobsters
| Command | Args | Description |
|---------|------|-------------|
| `lobsters hot` | `--limit N` | Hottest stories |
| `lobsters newest` | `--limit N` | Newest stories |
| `lobsters active` | `--limit N` | Most active |
| `lobsters tag` | `--tag <str>`, `--limit N` | Stories by tag |
### StackOverflow
| Command | Args | Description |
|---------|------|-------------|
| `stackoverflow hot` | `--limit N` | Hot questions |
| `stackoverflow search` | `--query <str>`, `--limit N` | Search questions Excerpt, first 6,000 characters of SKILL.md, verbatim from the audited commit. It is text from someone else’s repository, quoted so you can judge it before your agent reads it.
Install
Pinned to the audited commit 0088e9f
npx skills add https://github.com/nashsu/AutoCLI-skill
git clone https://github.com/nashsu/opencli-rs-skill git -C opencli-rs-skill checkout 0088e9fed40a
Commands as the repository documents them: shown, never run by us. Our verdict covers commit 0088e9fed40a only.
Works in which agents?
What its own text says, not a test
| Agent | Status | More |
|---|---|---|
| Claude Code | Mentioned in its text, not tested | Skills for Claude Code · About Claude Code |
| Codex | Mentioned in its text, not tested | Skills for Codex · About Codex |
| Cursor | Mentioned in its text, not tested | Skills for Cursor · About Cursor |
| OpenClaw | Mentioned in its text, not tested | Skills for OpenClaw · About OpenClaw |
Audit history
Every audit, every source change
- ✕BLOCK D 69 / 100
first audit · source
0088e9fed40a
Similar skills
affaan-m/ECC
Docker and Docker Compose patterns for local development, container security, networking, volume strategies, and multi-service orchestration. Use when setting up containerized development environments or reviewing…
n8n-io/n8n
Fetch and display the full transcript from a Loom video URL. Use when the user wants to get or read a Loom transcript.
anthropics/skills
Reference for the Claude API / Anthropic SDK — model ids, pricing, params, streaming, tool use, MCP, agents, caching, token counting, model migration. TRIGGER — read BEFORE opening the target file; don't skip because it…
Questions about opencli-rs
What does the opencli-rs skill do?
Is opencli-rs safe to install?
What can opencli-rs access on my machine?
Which assistants does opencli-rs work with?
How current is this page?
Sources
- github.com/nashsu/opencli-rs-skill — the audited source at commit 0088e9fed40a and every finding aboveObserved · 20 Oct 2026
Spotted something wrong? Report a correction · Methodology
Keep going in your AI
Opens with this page as the source. We add nothing else to the prompt.
- What does the opencli-rs skill do?
- Is opencli-rs safe to install?
- What can opencli-rs access on my machine?