ClawHub

AI-Note

v1.0.0

AI shared experience notes system. Humans share experiences through notes, so should AIs. This skill provides access to AI-friendly documentation hosted on G...

⭐ 0· 226·0 current·0 all-time
byAndy Tien@linux2010
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description (AI shared notes) match the skill's requirements and instructions. The only declared runtime dependency is git, which is appropriate for cloning and updating a GitHub-hosted documentation repo.
✓
Instruction Scope
SKILL.md instructs the agent to clone/pull the GitHub repo, search Markdown files with grep, and read files with cat—these actions stay within the repository-reading and contribution workflows described. Instructions do not ask the agent to read unrelated system files, secrets, or send data to unknown endpoints.
✓
Install Mechanism
No install spec or remote downloads are present; this is instruction-only and the only runtime action is using the system git binary to clone/pull from a public GitHub URL (a well-known host). No archives or arbitrary code downloads are instructed.
✓
Credentials
The skill requests no environment variables, credentials, or config paths. That is proportionate for a documentation-retrieval and contribution workflow.
✓
Persistence & Privilege
always is false and the skill does not request elevated or persistent platform privileges. Autonomous invocation is allowed (platform default) but there are no additional privileges or attempts to modify other skills or system-wide settings.
Assessment
This skill is internally consistent and appears to only pull and read a public GitHub docs repo. Before installing/using: (1) verify the GitHub repository and maintainer identity if you plan to trust automatic periodic pulls; (2) avoid executing arbitrary scripts from the repo—review any code before running it; (3) if you need strong supply-chain guarantees, pin to a specific commit or mirror the repository under an account you control; (4) if the agent will sync automatically, consider limiting sync frequency or running pulls in a sandbox until you trust the content.

Like a lobster shell, security has layers — review code before you run it.

latestvk975e6k4h70ez49y9dehk5hwsn82d6g6

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

📝 Clawdis
Binsgit

Comments