imoonkey

@imoonkey

GitHub

95 Skills

5320 Total Stars

August 2026 Joined

Public Skills

Grubhub

by imoonkey

```

Code Review 56 4mo ago

Substack

by imoonkey

```

SEO 56 4mo ago

PyPI

by imoonkey

```

Legal 56 4mo ago

npm

by imoonkey

```

API Dev 56 4mo ago

Hacker News

by imoonkey

```

Comments 56 4mo ago

by imoonkey

```

API Dev 56 4mo ago

AngelList Venture

by imoonkey

GraphQL messages resolver requires conversationId passed directly to the messages() field, not just the parent conversation().

Processing 56 4mo ago

openweb

by imoonkey

"Typed JSON access to 90+ real websites — Google, Amazon, Reddit, YouTube, GitHub, Instagram, Bloomberg, Zillow, and more — across search, shopping, travel, finance, social, news, and dev tools. Use to read, search, post, comment, message, or otherwise interact with these sites (prices, products, articles, stock quotes, flights, posts, comments, DMs, etc.). Run openweb sites for the full list."

Auth 56 4mo ago

X (Twitter)

by imoonkey

Verified write ops: likeTweet, unlikeTweet, createBookmark, deleteBookmark, createRetweet, deleteRetweet, unblockUser, unfollowUser, plus all 6 user/reply ops in standalone pnpm dev x exec runs after the 2026-04-19 fixture refresh. Aggregate verify --write still loses the create-side ops to cascade churn — see DOC.md "Verify quirk".

API Dev 56 4mo ago

Discord

by imoonkey

createServer / createChannel — not supported (removed from spec, 2026-04-20). Discord requires an X-Super-Properties header (base64 client-fingerprint blob) on create-entity endpoints; the page transport does not inject it and there is no discord adapter to synthesize one. All other writes (sendMessage, deleteMessage, addReaction, removeReaction) work via the same webpack_module_walk Authorization header. Unblock: capture a live super-properties value from the SPA bundle an

File Ops 56 4mo ago

Instagram

by imoonkey

Write-op coverage (2026-04-19): all 12 write ops verified PASS end-to-end (likePost, unlikePost, savePost, unsavePost, followUser, unfollowUser, muteUser, unmuteUser, blockUser, unblockUser, createComment, deleteComment). createComment/deleteComment chain via ${prev.createComment.id} against a low-traffic target post — high-profile accounts (e.g. @instagram) trigger spam-filter shadow-deletes that 404 the immediate delete.

Comments 56 4mo ago

ChatGPT

by imoonkey

sendMessage is adapter-driven.

Database 56 4mo ago

Bilibili

by imoonkey

```

Comments 56 4mo ago

Xueqiu (雪球)

by imoonkey

```

Finance 56 4mo ago

Costco

by imoonkey

Two distinct authToken formats. PDP add uses a Microsoft B2C JWT (sessionStorage authToken_<userHash>); cart edits use a WCS userId,signature token (cart-page hidden input). They are not interchangeable.

Design 56 4mo ago

GitHub

by imoonkey

Read ops on public repos work without auth (rate-limited to 60 req/h); authenticated read ops via cookies work too (5000 req/h).

API Dev 56 4mo ago

by imoonkey

source_url should match the page where the action would naturally happen — Pinterest sometimes rejects writes when source_url is just /. Use the board/pin URL the action targets (e.g. /<username>/<board-slug>/).

Comments 56 4mo ago

Weibo

by imoonkey

Upstream typos: destory (not destroy) — unbookmarkPost POSTs to /ajax/statuses/destoryFavorites and unfollowUser POSTs to /ajax/friendships/destory. Both spellings are wrong (Weibo's typo); using the "correct" destroy returns HTML 404. Param name is also asymmetric — followUser takes friend_uid, unfollowUser takes uid.

Comments 56 4mo ago

Best Buy

by imoonkey

Not every SKU is online-sellable — addToCart may return HTTP 400 ITEM_NOT_SELLABLE (typical for batteries, store-pickup-only items). Check getProductPricing buttonState.purchasable first.

API Dev 56 4mo ago