Knowledge Lib
v1.2.0Personal knowledge wiki manager. Organizes notes into structured .md wiki with concept pages, summaries, and cross-references. Activate when user says "add t...
⭐ 0· 38·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (personal knowledge wiki) align with the included shell scripts (ingest, compile, lint, update-index, health) and the SKILL.md workflows. Required capabilities are minimal (reading/writing markdown under ~/.openclaw/workspace/knowledge or an override via KNOWLEDGE_BASE_DIR). No unrelated credentials, config paths, or binaries are requested.
Instruction Scope
SKILL.md and the scripts instruct the agent to save, summarize, lint, and query local wiki files. However, the skill expects the agent to 'read the provided content or link' and comments in ingest.sh say 'agent will populate this via web_fetch' — that implies the agent (or host) may need network access to fetch remote links, but the SKILL.md metadata claims 'network: none'. This is an inconsistency (likely documentation/metadata oversight) that you should verify: if you will add remote links, the agent must be allowed to fetch them; otherwise the agent must provide document contents directly.
Install Mechanism
There is no install spec (instruction-only), which is lowest-risk. However, the skill package includes executable shell scripts that an agent could run when invoked; these scripts will be written to disk as part of the skill package. The scripts themselves are straightforward (file operations, grep/sed/find) and contain no network calls, hidden endpoints, or obfuscated code.
Credentials
No credentials or sensitive environment variables are requested. The only environment variable used is an optional KNOWLEDGE_BASE_DIR to override the default path — this is appropriate and proportional to the skill's purpose.
Persistence & Privilege
Skill does not request 'always: true' or elevated privileges. It reads and writes only its own workspace files and appends to its own log.md; it does not modify other skills or system-wide settings.
Assessment
This package appears coherent and focused on managing a local markdown wiki. Before installing: (1) confirm whether you want the agent to fetch remote links — the SKILL.md claims 'network: none' but the workflow assumes the agent can web-fetch content; if you don't want network access ensure you supply document contents directly. (2) Inspect the included shell scripts (they are simple and local-only) and ensure you are comfortable allowing the agent to execute them; they will read/write files under ~/.openclaw/workspace/knowledge (or KNOWLEDGE_BASE_DIR). (3) No credentials are requested, but if you add links the agent might access the network — restrict agent/network permissions accordingly if you want to avoid external fetches.Like a lobster shell, security has layers — review code before you run it.
latestvk97frx85bqncw4ypn009h9mzk98483ze
License
MIT-0
Free to use, modify, and redistribute. No attribution required.