imoonkey
@imoonkey
Public Skills
Grubhub
by imoonkey
```
Substack
by imoonkey
```
PyPI
by imoonkey
```
npm
by imoonkey
```
Hacker News
by imoonkey
```
by imoonkey
```
AngelList Venture
by imoonkey
GraphQL messages resolver requires conversationId passed directly to the messages() field, not just the parent conversation().
openweb
by imoonkey
"Typed JSON access to 90+ real websites — Google, Amazon, Reddit, YouTube, GitHub, Instagram, Bloomberg, Zillow, and more — across search, shopping, travel, finance, social, news, and dev tools. Use to read, search, post, comment, message, or otherwise interact with these sites (prices, products, articles, stock quotes, flights, posts, comments, DMs, etc.). Run openweb sites for the full list."
X (Twitter)
by imoonkey
Verified write ops: likeTweet, unlikeTweet, createBookmark, deleteBookmark, createRetweet, deleteRetweet, unblockUser, unfollowUser, plus all 6 user/reply ops in standalone pnpm dev x exec runs after the 2026-04-19 fixture refresh. Aggregate verify --write still loses the create-side ops to cascade churn — see DOC.md "Verify quirk".
Discord
by imoonkey
createServer / createChannel — not supported (removed from spec, 2026-04-20). Discord requires an X-Super-Properties header (base64 client-fingerprint blob) on create-entity endpoints; the page transport does not inject it and there is no discord adapter to synthesize one. All other writes (sendMessage, deleteMessage, addReaction, removeReaction) work via the same webpack_module_walk Authorization header. Unblock: capture a live super-properties value from the SPA bundle an
by imoonkey
Write-op coverage (2026-04-19): all 12 write ops verified PASS end-to-end (likePost, unlikePost, savePost, unsavePost, followUser, unfollowUser, muteUser, unmuteUser, blockUser, unblockUser, createComment, deleteComment). createComment/deleteComment chain via ${prev.createComment.id} against a low-traffic target post — high-profile accounts (e.g. @instagram) trigger spam-filter shadow-deletes that 404 the immediate delete.
ChatGPT
by imoonkey
sendMessage is adapter-driven.
Bilibili
by imoonkey
```
Xueqiu (雪球)
by imoonkey
```
Costco
by imoonkey
Two distinct authToken formats. PDP add uses a Microsoft B2C JWT (sessionStorage authToken_<userHash>); cart edits use a WCS userId,signature token (cart-page hidden input). They are not interchangeable.
GitHub
by imoonkey
Read ops on public repos work without auth (rate-limited to 60 req/h); authenticated read ops via cookies work too (5000 req/h).
by imoonkey
source_url should match the page where the action would naturally happen — Pinterest sometimes rejects writes when source_url is just /. Use the board/pin URL the action targets (e.g. /<username>/<board-slug>/).
by imoonkey
Upstream typos: destory (not destroy) — unbookmarkPost POSTs to /ajax/statuses/destoryFavorites and unfollowUser POSTs to /ajax/friendships/destory. Both spellings are wrong (Weibo's typo); using the "correct" destroy returns HTML 404. Param name is also asymmetric — followUser takes friend_uid, unfollowUser takes uid.
Best Buy
by imoonkey
Not every SKU is online-sellable — addToCart may return HTTP 400 ITEM_NOT_SELLABLE (typical for batteries, store-pickup-only items). Check getProductPricing buttonState.purchasable first.
DoorDash
by imoonkey
Search results include non-store items (grocery suggestions) — filter via resultType.
Medium
by imoonkey
```
YouTube
by imoonkey
```
Walmart
by imoonkey
```
Telegram
by imoonkey
```