Skip to content
← Registry
Trust Report

zhihu

Manage Zhihu (知乎) AI Bot integration. Use for: (1) Publishing pins (想法) to Zhihu Rings, (2) Liking/unliking pins and comments, (3) Creating comments on pins, (4) Deleting comments, (5) Getting ring details and content lists, (6) Getting comment lists. Requires Zhihu API credentials (app_key and app_secret).

91
SUSPICIOUS
Format: openclawScanner: v0.7.1Duration: 44msScanned: 7d ago · Apr 1, 5:46 PMSource →
Embed this badge
AgentVerus SUSPICIOUS 91AgentVerus SUSPICIOUS 91AgentVerus SUSPICIOUS 91
[![AgentVerus](https://agentverus.ai/api/v1/skill/c03e4d03-5df4-458c-afd7-ca75e7c0b32f/badge)](https://agentverus.ai/skill/c03e4d03-5df4-458c-afd7-ca75e7c0b32f)
Community Discussion

Community Comments

Public comments are the active feedback surface on skill reports right now. Use them to share implementation notes, edge cases, and operator context.

0 comments

Sign in to comment on this skill

No comments yet. Be the first to share your thoughts.

Continue the workflow

Keep this report moving through the activation path: rescan from the submit flow, capture real-world interactions, and wire the trust endpoint into your automation.

https://agentverus.ai/api/v1/skill/c03e4d03-5df4-458c-afd7-ca75e7c0b32f/trust
Personalized next commands

Use these current-skill command blocks to keep this exact report moving through your workflow.

Record an interaction
curl -X POST https://agentverus.ai/api/v1/interactions \
  -H "Authorization: Bearer at_your_api_key" \
  -H "Content-Type: application/json" \
  -d '{"agentPlatform":"openclaw","skillId":"c03e4d03-5df4-458c-afd7-ca75e7c0b32f","interactedAt":"2026-03-15T12:00:00Z","outcome":"success"}'
Fetch trust JSON
curl https://agentverus.ai/api/v1/skill/c03e4d03-5df4-458c-afd7-ca75e7c0b32f/trust

Category Scores

94
Permissions
100
Injection
79
Dependencies
85
Behavioral
75
Content
100
Code Safety

Findings (7)

highCapability contract mismatch: inferred network access is not declared-6

The scanner inferred a risky capability from the skill content/metadata, but no matching declaration was found. Add a declaration with a clear justification, or remove the behavior.

Content pattern: https://example.com/img1.jpg,https://example.com/img2.jpg

Declare this capability explicitly in frontmatter permissions with a specific justification, or remove the risky behavior.

permissionsASST-04
highLocal file access detected (inside code block)-15

Found local file access pattern: "scripts/zhihu_bot.py"

python3 /home/jone/clawd/skills/zhihu/scripts/zhihu_bot.py ring detail <ring_id> [page_num] [page_size]

Treat local file browsing as privileged access. Restrict it to explicit user-approved paths and avoid combining it with unrestricted browser/session reuse.

behavioralASST-03
highMany external URLs referenced (4)-8

The skill references 4 external URLs and also discusses auth/API/payment workflows, which increases the chance that sensitive operations depend on many remote endpoints.

URLs: https://example.com/img1.jpg, https://example.com/img2.jpg, https://openapi.zhihu.com/`, https://www.zhihu.com/ring/host/2001009660925334090

Minimize external dependencies to reduce supply chain risk.

dependenciesASST-04
mediumUnknown external reference-8

The skill references an unknown external domain which is classified as medium risk.

https://openapi.zhihu.com/`

Verify that this external dependency is trustworthy and necessary.

dependenciesASST-04
lowUnknown external reference-5

The skill references an unknown external domain which is classified as low risk.

https://www.zhihu.com/ring/host/2001009660925334090

Verify that this external dependency is trustworthy and necessary.

dependenciesASST-04
lowNo explicit safety boundaries-10

The skill does not include explicit safety boundaries defining what it should NOT do.

No safety boundary patterns found

Add a 'Safety Boundaries' section listing what the skill must NOT do (e.g., no file deletion, no network access beyond needed APIs).

contentASST-09
infoError handling instructions present

The skill includes error handling instructions for graceful failure.

Error handling patterns detected

Keep these error handling instructions.

contentASST-09