知识自动沉淀引擎

This skill broadly does what it says (collect yesterday's notes and conversations, analyze them, and sync to Get笔记 and Feishu), but there are several red flags you should resolve before installing: 1) The SKILL.md expects credentials (Get笔记 apiKey/GETNOTE_CLIENT_ID and Feishu app_secret) stored in openclaw.json yet the skill metadata declares no required env or config — confirm where and how secrets are stored and that the skill will only use the specific credentials you intend. 2) The file includes a hardcoded Feishu folder_token and member_id and a hardcoded local path (/Users/openclawer/...). Ask the author to remove or parameterize these so the skill won't act on someone else's folder or require a specific username. 3) The skill uses exec + curl to obtain tokens and set permissions and will read session history and local files (workspace/vocabulary). If you install it, ensure you trust the skill and that it only has access to the accounts/folders you expect. 4) Prefer the author to declare required env vars/config paths in the skill metadata and to avoid embedding organization-specific tokens. If you cannot get these clarifications, treat the skill as risky and do not grant it access to production credentials or sensitive conversation history.