Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

X Knowledge Base

v1.0.2

自動收集 X 書籤並轉化為 Obsidian 知識庫,配備 AI 濃縮與交叉連結功能,支援自我進化趨勢分析

0· 535·2 current·2 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Suspicious
high confidence
!
Purpose & Capability
The code and docs implement bookmark collection, article fetching, AI summarization, cross-linking, and trend analysis which match the description. However the registry metadata claims no required environment variables or binaries while the SKILL.md/scripts require BIRD_AUTH_TOKEN/BIRD_CT0 and tools (bird CLI, curl, python3). That mismatch is incoherent and should have been declared.
Instruction Scope
Runtime instructions and scripts read and write Markdown bookmark files under default paths (e.g. /home/ubuntu/clawd/memory/bookmarks and ~/clawd/obsidian-vault), call external endpoints (r.jina.ai for full-text fetching and the MiniMax API for summarization), and store trend JSON files. These actions are within the skill's stated purpose, but they will transmit bookmark/article content to third-party services (Jina, MiniMax), which is a privacy/exfiltration risk the user must accept explicitly.
Install Mechanism
No install spec is provided (instruction-only install), so nothing is auto-downloaded during installation. Code files are bundled with the skill and will run on the host. The lack of an install step reduces supply-chain risk, but bundled scripts assume availability of system tools (bird, curl, python3) that are not declared in the registry metadata.
!
Credentials
The SKILL.md and scripts require BIRD_AUTH_TOKEN and BIRD_CT0 (Twitter/bird CLI auth) and optionally MINIMAX_API_KEY; those are appropriate for the stated functionality. However the registry metadata lists no required env vars, which is inconsistent. Also supplying the MiniMax key (or using Jina proxy) will send bookmark/article contents to third-party services — this is proportionate only if you accept that external transmission of your bookmarked content is intended.
Persistence & Privilege
The skill does not request always: true and does not modify other skills. It writes files into user-level directories (~/clawd/...), creates trends JSON, and updates bookmarks — this is expected for a knowledge-base tool, but be aware of the default hardcoded paths that may need changing.
What to consider before installing
Key things to consider before installing: - Metadata mismatch: The registry says no required env vars/binaries, but the SKILL.md and scripts require BIRD_AUTH_TOKEN and BIRD_CT0 and expect bird CLI, curl, and Python. Confirm these requirements and failure modes before installing. - Privacy / data exfiltration: The skill sends bookmark/article URLs and full text to external services (r.jina.ai for fetching page content and the MiniMax endpoint for summarization). If your bookmarks contain private or sensitive content, that content will be transmitted to third parties. Only provide API keys/tokens if you trust those services and accept that data flow. - Token scope and handling: BIRD tokens grant access to your X/Twitter account bookmarks—treat them like passwords. Provide the minimal-privilege tokens and avoid running the skill on a shared account or host you don't control. - Default paths and filesystem access: Scripts use hardcoded defaults under /home/ubuntu/clawd/..., which may read/write many files in that tree. Consider running in an isolated environment (container or dedicated user) and override SOURCE_DIR/BOOKMARKS_DIR/OBSIDIAN_DIR to safe locations. - Optional API keys: You can skip AI summarization by leaving MINIMAX_API_KEY unset (scripts check for this), reducing external calls. - Inspect and test locally: Because code is bundled, review or run the scripts in a safe environment first. Pay attention to the Jina URL variants in docs vs scripts (they differ slightly) and test with non-sensitive bookmarks. If you want to proceed, run the skill in an isolated VM/container, set explicit target directories, and avoid providing API keys until you verify behavior with dummy data.

Like a lobster shell, security has layers — review code before you run it.

latestvk97fcsgdw0zbc6yxtza89fkj7n81g8c8

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

SKILL.md

X Knowledge Base

自動將 X (Twitter) 書籤轉化為 Obsidian Markdown 格式,建立個人知識庫。支援自我進化,根據書籤傾向動態調整關鍵字和趨勢分析。

功能

基礎功能

  • 抓取書籤:從 X/Twitter 抓書籤內容
  • 完整原文:使用 Jina AI 擷取完整文章內容
  • AI 濃縮:自動產生一句話摘要、三個重點、應用場景
  • 交叉連結:根據標籤自動建立 wiki-link
  • Obsidian 格式:YAML frontmatter + wiki-link

自我進化功能 ⭐

  • 興趣趨勢追蹤:每次存書籤,自動記錄標籤並統計頻率
  • 動態關鍵字調整:根據趨勢自動調整每日情報關鍵字
  • 新興標籤偵測:發現突然增加的標籤,自動加入追蹤
  • 自適應推薦:根據書籤傾向推薦相關內容

安裝

  1. 設定 Twitter API 或 bird CLI
  2. 設定 Brave Search API(用於趨勢分析)
  3. 設定 Jina AI(用於文章擷取)
  4. 設定 MiniMax API(用於 AI 濃縮)
  5. 設定 Obsidian vault 路徑

使用方式

檢查書籤

"檢查我的書籤" - 抓取並儲存新書籤

自我進化

"今天的趨勢是什麼" - 興趣趨勢報告(含動態調整)
"我的興趣變化了嗎" - 偵測興趣轉變

AI 濃縮

每次存書籤時,自動:

  • 產生一句話摘要
  • 列出三個重點
  • 寫出應用場景

交叉連結

根據標籤自動建立相關書籤連結:

## 🔗 相關書籤
- [[書籤標題|標籤]]

檔案結構

x-knowledge-base/
├── SKILL.md
├── scripts/
│   ├── fetch_bookmarks.sh      # 抓書籤
│   ├── fetch_article.sh        # Jina AI 抓全文
│   └── save_obsidian.sh        # 存 Obsidian
├── tools/
│   ├── bookmark_enhancer.py    # AI 濃縮 + 交叉連結
│   └── trend_analyzer.py       # 自我進化趨勢分析
└── config/
    ├── interests.yaml           # 興趣標籤配置
    └── trends.json             # 趨勢數據(自動產生)

自我進化機制

1. 興趣趨勢追蹤

每次存書籤時:

  1. 擷取書籤的所有標籤
  2. 寫入 trends.json
  3. 統計每個標籤的出現頻率
  4. 計算趨勢分數

2. 動態關鍵字調整

根據趨勢數據,自動調整每日情報關鍵字:

  • 頻率上升的標籤 → 提高優先級
  • 新出現的標籤 → 加入觀察名單
  • 下降的標籤 → 降低優先級

3. 新興標籤偵測

# 趨勢分數計算
new_score = (current_count - previous_count) / previous_count * 100

if new_score > 50%:  # 超過 50% 成長
    alert("新興趨勢!")

4. 自適應學習

根據書籤傾向:

  • 自動調整感興趣的主題權重
  • 推薦相似內容
  • 預測可能想看的書籤

技術細節

Jina AI 擷取

https://r.jina.ai/http://x.com/用戶名/status/ID

MiniMax API

趨勢數據格式 (trends.json)

{
  "last_updated": "2026-02-18T14:00:00Z",
  "tags": {
    "ai": { "count": 15, "trend": "+20%" },
    "video": { "count": 8, "trend": "+5%" },
    "seo": { "count": 12, "trend": "-10%" }
  },
  "new_emerging": ["vibe-coding", "claude-code"],
  "recommended_keywords": ["AI video generation", "Claude automation"]
}

差異化

功能x-bookmarks我們的 skill
內容深度摘要完整原文
AI 濃縮✅ 有
儲存格式JSONObsidian Markdown
趨勢分析✅ 有
交叉連結✅ 有
自我進化✅ ⭐ 有

依賴

  • Python 3.10+
  • requests
  • Jina AI(免費)
  • MiniMax API
  • Brave Search API(可選)

環境變數(必填/選填)

  • BIRD_AUTH_TOKEN(必填)
  • BIRD_CT0(必填)
  • MINIMAX_API_KEY(選填,不填則略過 AI 濃縮)
  • MINIMAX_ENDPOINT(選填,預設 https://api.minimax.io/anthropic/v1/messages
  • MINIMAX_MODEL(選填,預設 MiniMax-M2.5

Files

9 total
Select a file
Select a file to preview.

Comments

Loading comments…