金石知识库
v1.0.0金石知识库管理技能。监控钉钉多维表格中的项目管理事项状态，当事项状态为已完成时自动归档并生成知识文档。
⭐ 0· 77·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description, required binary 'mcporter', and the DINGTALK_MCP_URL environment variable align with a DingTalk multi-dimensional table integration. The code uses mcporter to call the dingtalk-ai-table provider and generates local markdown documents from records, which matches the stated purpose. Minor note: the Python code itself does not directly read DINGTALK_MCP_URL (the CLI/connector likely does), but this is plausible rather than suspicious.
Instruction Scope
SKILL.md and archive_checker.py only operate on the declared DingTalk base/table/view and on files inside the skill workspace (docs/ and archived-items.json). There are no instructions to read unrelated system files, exfiltrate data to external endpoints, or perform broad system reconnaissance. The script invokes 'mcporter' via subprocess to query records and writes generated docs/state to its workspace.
Install Mechanism
No install spec is provided (instruction-only with included script), so nothing is downloaded or extracted at install time. This is a low-risk install model; the only runtime dependency the skill enforces is the external 'mcporter' binary which must be installed separately by the operator.
Credentials
The skill requires a single env var DINGTALK_MCP_URL which is appropriate for a DingTalk connector. It does not request unrelated secrets or multiple credentials. Note: the Python code does not directly reference that env var — expected because the mcporter/dingtalk-ai-table integration likely reads it; operators should confirm how mcporter obtains credentials (env, config file, or other).
Persistence & Privilege
always:false and user-invocable:true (default) — no forced global presence. The skill stores its own state and generated docs under its workspace only and does not modify other skills or system-wide agent settings.
Assessment
This skill appears to do what it claims: query a DingTalk table and write local markdown docs. Before installing, confirm the following: (1) mcporter is a trusted binary in your environment and you understand how it gets configured (does it read DINGTALK_MCP_URL or other credentials from a config file?), (2) the workspace where docs and archived-items.json are written is an appropriate location (avoid running it in a directory that contains sensitive secrets), (3) inspect the dingtalk-ai-table/mcporter setup to see what network access and credentials they will use, and (4) run the script manually first (python3 skills/knowledge-base/archive_checker.py) as a non-privileged user to verify behavior and outputs. The code uses subprocess.run without shell=True and writes only to its own workspace, so there are no immediate red flags, but you should vet the mcporter/dingtalk connector configuration before granting it access to live systems.Like a lobster shell, security has layers — review code before you run it.
latestvk97281zbn0m76pzbhm89stxcc983ph3q
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
Binspython3, mcporter
EnvDINGTALK_MCP_URL