X Bookmarks Archiver
v1.0.0Fetch your X bookmarks, auto-categorize by URL, generate AI summaries, and save organized markdown archives in your OpenClaw workspace.
⭐ 2· 1.9k·3 current·3 all-time
by@iamadig
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
Name/behavior align: scripts fetch X bookmarks via the bird CLI, categorize them, optionally call OpenAI to generate summaries, and write markdown files into an OpenClaw workspace. The required binaries and optional OPENAI_API_KEY are appropriate for this functionality.
Instruction Scope
Runtime instructions and scripts stay within the stated purpose (fetch → process → write markdown). The code performs network HEAD requests to bookmarked URLs (expandUrl) and POSTs to api.openai.com when OPENAI_API_KEY is present; these network calls are expected here but mean the tool will contact arbitrary bookmarked hosts and OpenAI. The scripts read and write files in the user's home directories (workspace and state).
Install Mechanism
No install spec — skill is instruction-plus-source included in the bundle. There are no downloads or external installers invoked by the skill itself. All code is included in the package.
Credentials
The skill only requires an optional OPENAI_API_KEY for AI summaries and allows overriding workspace via OPENCLAW_WORKSPACE and OPENCLAW_PROFILE. However, the state code accepts X_BOOKMARK_STATE_DIR (used to set where pending/processed JSON live) but this env var is not documented in SKILL.md. Also SKILL.md and code disagree on legacy vs dot-prefixed state/workspace paths (e.g., ~/clawd vs ~/.clawd), which is an implementation inconsistency but not a secret-exfiltration risk.
Persistence & Privilege
The skill does not request always:true or other elevated platform privileges. It writes its own state/markdown files under user-owned directories and does not attempt to modify other skills or system-wide configs.
Assessment
This appears to be a genuine X bookmarks archiver. Before installing or running: 1) Inspect and (optionally) run the tests in an isolated/temp directory to verify behavior. 2) Be aware the tool will: run the local bird CLI (so bird must be installed and authenticated), perform HEAD requests to each bookmarked URL (which will contact arbitrary hosts and could reach internal resources if such URLs exist), and call api.openai.com when OPENAI_API_KEY is set. 3) If you prefer output and state in safe locations, set OPENCLAW_WORKSPACE and X_BOOKMARK_STATE_DIR to directories you control (the latter is supported by the code but not documented in SKILL.md). 4) Note the small path inconsistencies (SKILL.md mentions ~/clawd while state.cjs uses ~/.clawd); verify the actual directories used on your machine. 5) Only provide an OPENAI_API_KEY if you want AI summaries; otherwise the tool will fall back to simple metadata. If you plan to allow autonomous agent invocation, remember this skill will perform network requests and write files — grant only if you trust it to act on your behalf.Like a lobster shell, security has layers — review code before you run it.
latestvk971g3k5ax6vzry1f085bf2bj9808h0x
License
MIT-0
Free to use, modify, and redistribute. No attribution required.