Siyuan Skill

This skill appears to do what it claims, but review and consider the following before installing/running: - Inspect the included JavaScript files (they are bundled with the skill) before executing. Because there is no installation sandbox, the code will run under Node in your environment. - Provide SIYUAN_BASE_URL and SIYUAN_TOKEN only for a Siyuan instance you control/trust. The token grants API access to your notes. - Optional features (vector search, embedding, Qdrant, OLLAMA or external EMBEDDING_BASE_URL) will send note content or embeddings to those external services — do not enable them for sensitive data unless you trust the destination and understand data retention/privacy. - The connector supports allowing self-signed TLS certificates; enabling that (SIYUAN_TLS_ALLOW_SELF_SIGNED and SIYUAN_TLS_ALLOWED_HOSTS) weakens TLS validation and should be used only for trusted internal endpoints. - The CLI can read local files when given a --file path. Be mindful an automated agent invoking this skill could be used to read files if given paths; rely on the skill's delete-protection settings and do not grant the agent broad autonomy if you are concerned about file access. If you want higher assurance, run the code in a restricted/test environment first, and verify that network endpoints used by embedding/Qdrant are the ones you expect.