Open Notebook Skill
v1.0.1Integrates OpenClaw agents with local open-notebook for creating, saving, and querying thematic notebooks using local Ollama AI models.
⭐ 2· 751·3 current·3 all-time
byIvan Cetta@nantes
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The name/description (integrating agents with a local open-notebook and Ollama models) matches the SKILL.md: it documents running open-notebook via Docker, using local Ollama models, and supplies PowerShell helper functions that POST to local API endpoints (http://localhost:5055 and UI at :8502). Required resources (Docker, Ollama, local containers) are coherent with the stated purpose.
Instruction Scope
The runtime instructions are narrowly scoped: the provided PowerShell functions only call local endpoints and require the user to run docker compose and create notebooks. They do not request system secrets, read arbitrary files, or send data to external hosts. Minor inconsistency: the README references additional .ps1 files (open-notebook-automation.ps1, on-query-handbook.ps1, create-notebooks.ps1) that are not present in the package — the SKILL.md, however, contains the actual function examples. This is a documentation/packaging mismatch but not an obvious security issue.
Install Mechanism
No install spec or code files are included; the skill is instruction-only. That results in a low installation risk surface because nothing is downloaded or written by the skill itself. The user is asked to run docker compose for open-notebook, which is expected and outside the skill's automated install scope.
Credentials
The skill requires no environment variables, no credentials, and no config paths. All API calls are targeted at localhost. There are no requests for unrelated secrets or external tokens. This is proportionate to a local notebook integration.
Persistence & Privilege
The skill does not request always:true, does not modify other skills or system-wide agent settings, and contains no install-time scripts to gain persistent presence. It instructs the user to load PowerShell functions into their session, which is normal for a CLI/automation helper.
Assessment
This skill appears to do what it says: helper PowerShell functions that POST to an open-notebook instance running locally. Before using, verify the sources you install (open-notebook Docker compose and Ollama) come from trusted repositories and inspect the docker-compose file(s) yourself before running docker compose up. Because the skill operates over localhost, it won't directly exfiltrate data to a remote server, but make sure you don't expose the open-notebook or Ollama ports to untrusted networks. Note the README mentions extra .ps1 scripts that aren't bundled here—confirm whether additional files were expected from the author. If you proceed, run the commands and containers in an isolated environment (or host-only network) until you've validated what the services do.Like a lobster shell, security has layers — review code before you run it.
latestvk977a7h4s2sf5zf7ekj6g951ys81hmghlocal-aivk977a7h4s2sf5zf7ekj6g951ys81hmghnotebookvk977a7h4s2sf5zf7ekj6g951ys81hmghollamavk977a7h4s2sf5zf7ekj6g951ys81hmghresearchvk977a7h4s2sf5zf7ekj6g951ys81hmgh
License
MIT-0
Free to use, modify, and redistribute. No attribution required.