Agent skill · Audited from source

opencli-rs

skill · nashsu/opencli-rs-skillLicence not declaredAudited 20 Oct 2026 · source 0088e9fed40a

★ 926pushed 183 days ago
✕BLOCKGrade D · 69/100 · 3 findings · 0088e9f
926repo stars · whole nashsu/opencli-rs-skill

Is it safe? No — BLOCK, grade D (69/100). We read this skill's source at commit 0088e9fed40a and found no filesystem, network or shell access and no hard-coded secrets. The audit raised 3 findings, 1 critical or high. What it does: Use autocli CLI to interact with 55+ social/content websites (HackerNews, Reddit, Twitter/X, Bilibili, Zhihu, Weibo, Xiaohongshu, YouTube, Medium, Substack, Douban, WeRead, Linux-do, V2EX, Bloomberg, Google, Arxiv,…

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “opencli-rs (nashsu/opencli-rs-skill)”. Retrieved 20 Oct 2026. https://modelsatlas.com/skills/nashsu/opencli-rs

Blocked. The page stays public so you can check this skill if someone recommended it to you. The audit found 1 critical or high finding, starting with “Prompt injection” in SKILL.md:3. Do not install it without reading them.

2 skills are called “opencli-rs”. You are viewing nashsu/opencli-rs-skill. 2 of them are BLOCK.

Trust audit

Audit 0.4.1 · source read 20 Oct 2026

Trust score69/100✕BLOCK D
1 critical0 high0 medium1 low1 info

BLOCK means the audit found something that could harm you or your machine. Grade D is shared by 642 of 14,816 audited skills.

What the source does

  • FilesystemNone observedNo reads or writes in the source
  • NetworkNone observedNo outbound calls in the source
  • ShellNone observedNo commands run in the source
  • DependenciesPinnedNothing floats
  • SecretsNone foundNo keys in source

Five audit layers

LayerWhat we checkResultFindings
L0 ProvenanceRepo owner, licence, archive status, activityPASS1
L1 Static sourceSecrets, path traversal, supply chain, hidden codeNA0
L2 InstructionsPrompt injection, authority framing, hidden directivesFAIL2
L3 InventoryThe files and declarations match the sourcePASS0
L4 SandboxRun in isolation and watch behaviourSKIPPED why0

Gates applied: critical finding, no behavioural pass, no license, undeclared transfer.

Findings (3)

CRITICALPrompt injectionprompt.transfer_instruction · SKILL.md:3
F-01 Prompt injectionCWE-94 · CWE-1427Layer L2
description: Use autocli CLI to interact with 55+ social/content websites (HackerNews, Reddit, Twitter/X, Bilibili, Zhihu, Weibo, Xiaohongshu, YouTube, Medium, Substack, Douban, WeRead, Linux-do, V2EX
Why
an instruction to move sensitive data to an outside destination
Fix
remove; a skill never needs the user's secrets off the machine
LOWInventory / provenanceinv.no_license
F-13 Inventory / provenanceCWE-1104Layer L0
Why
no LICENSE file and no repo licence
Fix
add a licence
INFOSupply chainprompt.pipe_to_shell · SKILL.md:12
F-08 Supply chainCWE-829 · CWE-1357Layer L2
**Install (if missing):** `curl -fsSL https://raw.githubusercontent.com/nashsu/AutoCLI/main/scripts/install.sh | sh`. On Windows, ask user to install from https://github.com/nashsu/AutoCLI.
Why
No further detail recorded for this rule.
Fix
—

Audit 0.4.1 · source sha 0088e9fed40a · 20 Oct 2026Report an issue or request a re-scan

Provenance

Who published it, and what the verdict is pinned to

  • Publishernashsu GitHub userOwner of the repository this skill is read from
  • Source foldernashsu/opencli-rs-skillThe exact folder we audited
  • LicenceNot declaredAs the repository states it
  • Commit pinned for this verdict0088e9fed40aA new audit runs when the source changes
  • Repository statusNot archivedLast push 183 days ago
  • Sandboxed runNot runSkills are read, not executed; layer L4 is skipped

What it tells the agent

Full source on GitHub ↗

Its description: Use autocli CLI to interact with 55+ social/content websites (HackerNews, Reddit, Twitter/X, Bilibili, Zhihu, Weibo, Xiaohongshu, YouTube, Medium, Substack, Douban, WeRead, Linux-do, V2EX, Bloomberg, Google, Arxiv,…

---
name: autocli
description: Use autocli CLI to interact with 55+ social/content websites (HackerNews, Reddit, Twitter/X, Bilibili, Zhihu, Weibo, Xiaohongshu, YouTube, Medium, Substack, Douban, WeRead, Linux-do, V2EX, Bloomberg, Google, Arxiv, Wikipedia, StackOverflow, Steam, Hugging Face, Apple Podcasts, Xiaoyuzhou, BBC, SinaFinance, DevTo, Lobsters, Xueqiu, BOSS直聘, Jike, Facebook, Instagram, TikTok, LinkedIn, Reuters, SMZDM, Ctrip, Coupang, Yahoo Finance, Barchart, Grok, Jimeng, Yollomi, Chaoxing, Weixin, Doubao, Cursor, Codex, ChatWise, ChatGPT, Notion, Discord, Antigravity etc.) via the user's Chrome login session. ALWAYS prefer autocli over playwright/browser automation for supported sites. Triggers when user asks to browse, search, fetch hot/trending content, post, or read messages on any website; also use 'autocli read <url>' to extract main article content as Markdown (prefer over WebFetch for JS-rendered or login-gated pages).
---

# autocli

Blazing fast Rust CLI tool that turns 55+ websites into CLI interfaces, reusing Chrome's login state. Zero credentials needed. Single 4.7MB binary, zero runtime dependencies.

**Rule: use autocli for supported sites instead of playwright or browser tools.**

**Install (if missing):** `curl -fsSL https://raw.githubusercontent.com/nashsu/AutoCLI/main/scripts/install.sh | sh`. On Windows, ask user to install from https://github.com/nashsu/AutoCLI.

## Syntax

```bash
autocli <site> <command> [--option value] [--format json]
```

**Common flags (all commands):**
- `--format json` — machine-readable output (preferred for parsing)
- `--limit N` — number of results (default varies, usually 20)
- `--format table|json|yaml|md|csv`

## Quick Examples

```bash
# 读取/浏览
autocli bilibili hot --limit 10 --format json
autocli zhihu hot --format json
autocli weibo hot --format json
autocli twitter timeline --format json
autocli hackernews top --limit 20 --format json
autocli v2ex hot --format json
autocli reddit hot --format json
autocli xiaohongshu feed --format json
autocli douban top250 --format json
autocli weread shelf --format json
autocli medium feed --format json

# 网页正文提取(任意 URL → Markdown,基于 Mozilla Readability)
autocli read https://www.anthropic.com/research/some-article
autocli read https://en.wikipedia.org/wiki/Rust -f text
autocli read https://example.com/article -f json -o article.json

# 搜索
autocli bilibili search --keyword "AI" --format json
autocli zhihu search --keyword "大模型" --format json
autocli twitter search "rust lang" --limit 10
autocli youtube search --query "LLM tutorial" --format json
autocli boss search --query "AI工程师" --city "上海" --format json
autocli google search "autocli" --format json
autocli stackoverflow search "rust async" --format json

# 互动(写操作)
autocli twitter post --text "Hello from CLI!"
autocli twitter reply --url "https://x.com/.../status/123" --text "Great post!"
autocli twitter like --url "https://x.com/.../status/123"
autocli jike create --text "Hello Jike!"
autocli xiaohongshu publish --title "标题" --content "内容"

# 个人数据
autocli bilibili history --format json
autocli twitter bookmarks --format json
autocli xueqiu watchlist --format json
autocli weread highlights --format json
autocli reddit saved --format json

# 诊断
autocli doctor
```

### ⚠️ 写操作风险提示(发帖/回复/点赞前必须告知)

1. **账号安全**:自动化行为可能触发平台风控
2. **不可撤回**:发布后立即公开
3. **最佳实践**:执行前向用户展示将发布的内容,等待确认

## Requirements

- Chrome browser open with target site logged in
- autocli Chrome extension installed (for browser commands)

**核心原则:永远不说"不支持",先尝试 autocli,失败或无命令时选择自己创建。**

## 自迭代能力:为新网站创建 CLI

**当 autocli 不支持某个网站时,不要放弃——自己创建!**

### 流程

```
1. autocli <site> --help        →  报错?说明不支持
2. autocli generate <url>       →  尝试自动生成(成功则结束)
3. 自动生成失败 → 手动创建 YAML:
   a. 打开目标页面
   b. browser_evaluate 探索 DOM 结构(找 data-test 属性、class 规律)
   c. 确认选择器后写入 ~/.autocli/adapters/<site>/top.yaml
   d. autocli <site> top --format json  →  验证输出
```

### YAML 格式(DOM 抓取模板)

```yaml
site: <sitename>
name: <command>
description: <描述>
domain: <domain>
strategy: public
browser: true

args:
  limit:
    type: int
    default: 10

pipeline:
  - navigate: https://<url>
  - evaluate: |
      (async () => {
        const limit = ${{ args.limit }};
        // DOM 抓取逻辑
        return results;
      })()

columns: [rank, name, ...]
```

### 调试技巧

- `browser_evaluate` 先探结构:`document.querySelector('...').innerHTML`
- 找 `data-test` 属性最稳定,其次 class 中的语义词
- tagline 通常是 name 的兄弟元素(`nameEl.parentElement.querySelector('span...')`)
- 去重用 `seen = new Set()`,防止重复产品

## Full Command Reference

All commands support: `--format table|json|yaml|md|csv`.

Run `autocli --help` for the full list of all 333 commands across 55+ sites.

---

## Public Mode (No Browser Needed)

### HackerNews

| Command | Args | Description |
|---------|------|-------------|
| `hackernews top` | `--limit N` (default 20) | Top stories |
| `hackernews new` | `--limit N` | Newest stories |
| `hackernews best` | `--limit N` | Best stories |
| `hackernews ask` | `--limit N` | Ask HN |
| `hackernews show` | `--limit N` | Show HN |
| `hackernews jobs` | `--limit N` | Job listings |
| `hackernews search` | `--query <str>`, `--limit N` | Search stories |
| `hackernews user` | `--id <username>` | User profile |

### Dev.to

| Command | Args | Description |
|---------|------|-------------|
| `devto top` | `--limit N` | Top articles |
| `devto tag` | `--tag <str>`, `--limit N` | Articles by tag |
| `devto user` | `--username <str>` | User's articles |

### Lobsters

| Command | Args | Description |
|---------|------|-------------|
| `lobsters hot` | `--limit N` | Hottest stories |
| `lobsters newest` | `--limit N` | Newest stories |
| `lobsters active` | `--limit N` | Most active |
| `lobsters tag` | `--tag <str>`, `--limit N` | Stories by tag |

### StackOverflow

| Command | Args | Description |
|---------|------|-------------|
| `stackoverflow hot` | `--limit N` | Hot questions |
| `stackoverflow search` | `--query <str>`, `--limit N` | Search questions 

Excerpt, first 6,000 characters of SKILL.md, verbatim from the audited commit. It is text from someone else’s repository, quoted so you can judge it before your agent reads it.

Install

Pinned to the audited commit 0088e9f

npx skills add https://github.com/nashsu/AutoCLI-skill

Commands as the repository documents them: shown, never run by us. Our verdict covers commit 0088e9fed40a only.

Works in which agents?

What its own text says, not a test

AgentStatusMore
Claude CodeMentioned in its text, not testedSkills for Claude Code · About Claude Code
CodexMentioned in its text, not testedSkills for Codex · About Codex
CursorMentioned in its text, not testedSkills for Cursor · About Cursor
OpenClawMentioned in its text, not testedSkills for OpenClaw · About OpenClaw
“Mentioned” means the skill’s text names the agent. We have not run it there.

Audit history

Every audit, every source change

  1. ✕BLOCK D 69 / 100

    first audit · source 0088e9fed40a

Similar skills

Questions about opencli-rs

What does the opencli-rs skill do?
The perfect companion for ClaudeCode/OpenClaw/Agent, Give your AI Agent the ability to reach information across the entire web, fetching real-time data from Bilibili, Zhihu, Twitter/X, YouTube, Weibo, Reddit, Facebook, Instagram, TikTok, Notion, Cursor and 55+ platforms with natural language — reusi
Is opencli-rs safe to install?
No — not without reading the findings first. The audit graded it D (69/100) and found 1 critical or high issue in the source. Each one is listed on this page with the file and line it is on.
What can opencli-rs access on my machine?
The audit observed no filesystem, network or shell use at all in its source.
Which assistants does opencli-rs work with?
Its documentation mentions claude-code, codex, cursor and openclaw. That is what the text claims, not a compatibility test we ran.
How current is this page?
The grade is for one exact copy of the source (0088e9fed40a), read on 2026-10-20. The repository is watched, and a new audit runs when it changes — this is the first audit.

Sources

Spotted something wrong? Report a correction · Methodology

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.