📦 GetnoteGet笔记 — Getnote Get笔记
v1.7.1- 个人笔记与知识库管理工具 ## 核心能力 **1. 一键保存任意内容为笔记** - 发链接 → 自动保存原文并生成摘要，支持所有公开网页 - 发图片 → OCR 识别文字，AI 解析图片内容 - 写文字 → 直接存为文本笔记 - 触发词：「记一下」「存到笔记」「保存这个链接」「保...
0· 16·0 当前·0 累计
by 安全扫描
OpenClaw
安全
high confidenceThe skill's code, instructions, and optional environment variables are consistent with a note-taking integration; the only notable behavior is that it auto-initiates OAuth and can write API credentials into the agent config for seamless use.
评估建议
This skill appears to do what it says: it talks to https://openapi.biji.com, uploads images, and saves/queries notes. Before installing, consider: 1) The skill will auto-start an OAuth device-flow if no GETNOTE_API_KEY is present and may write the received API key into ~/.openclaw/openclaw.json for future use — only click the authorization link if you trust the service. 2) Prefer manual configuration (place GETNOTE_API_KEY / GETNOTE_CLIENT_ID into your OpenClaw config) if you want to avoid autom...详细分析 ▾
✓ 用途与能力
Name/description, included scripts (OAuth poll, image upload), API base URL, and optional env vars (GETNOTE_API_KEY, GETNOTE_CLIENT_ID, GETNOTE_OWNER_ID) all align with a note-taking/knowledge-base integration. There are no unrelated credentials, binaries, or paths requested.
ℹ 指令范围
SKILL.md is detailed and stays within its domain (calling openapi.biji.com, uploading images, saving/fetching notes). It instructs the agent to automatically start the OAuth device flow when GETNOTE_API_KEY is missing and to write configuration after authorization — this is coherent for UX but broadens the agent's runtime actions (link generation, polling, writing ~/.openclaw/openclaw.json).
✓ 安装机制
No install spec is declared (instruction-only), and included scripts are plain Python. README mentions fetching SKILL.md from raw.githubusercontent.com (a common pattern). There are no downloads from obscure personal servers or extracted archives in the install spec.
✓ 凭证需求
Requested/optional environment variables are limited and appropriate for the service (API key, client id, optional owner id). The code reads only those env vars; no unrelated secrets or broad system credentials are requested.
ℹ 持久化与权限
always:false (no forced inclusion). The skill's instructions intend to write API credentials into ~/.openclaw/openclaw.json after OAuth so future calls are seamless — this is within normal scope but may be surprising if users expect explicit manual configuration each time.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.7.12026/4/20
Fork and update to 1.7.1
● Pending
安装命令
点击复制官方npx clawhub@latest install lovefromio-getnote
镜像加速npx clawhub@latest install lovefromio-getnote --registry https://cn.longxiaskill.com