Talebook

v1.0.6

Talebook(PoxenStudio)是个人书库管理系统,提供电子书及实体书管理,包括存储、分类、搜索和元数据管理功能。你可以帮助用户:查询书库统计信息和阅读统计,搜索/浏览书籍,获取书籍详情,更新书籍元数据(书名、作者、标签、分类、简介等),自动联网填充书籍信息,发送书籍到邮箱或阅读器设备,上传电子书或通过...

0· 373·2 current·2 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
Name/description (Talebook book management) matches the required items: python3 and the three TALEBOOK_* env vars. The script contacts the declared TALEBOOK_HOST and performs book/user/library operations consistent with the description.
Instruction Scope
SKILL.md instructs running the included Python script with JSON args and documents the specific API calls. The instructions reference only the declared environment variables and the Talebook API endpoints; they do not ask the agent to read unrelated files or exfiltrate data to other endpoints.
Install Mechanism
No install spec (instruction-only) and the code file is bundled. The script relies on the third-party Python 'requests' library but SKILL.md lists only python3 as a required binary; the script will exit with an installation hint if 'requests' is missing. There are no downloads from external URLs or extract steps.
Credentials
Only TALEBOOK_HOST, TALEBOOK_USER, and TALEBOOK_PASSWORD are required — all directly needed to authenticate to the self-hosted Talebook service. There are no unrelated secrets or extra credentials requested.
Persistence & Privilege
Skill is not marked always:true and uses normal autonomous invocation defaults. It does not attempt to modify other skills or system-wide agent settings.
Assessment
This skill appears to be what it claims: a client for a Talebook server. Before installing, confirm you trust the TALEBOOK_HOST URL (it will receive your TALEBOOK_USER and TALEBOOK_PASSWORD). Provide credentials via session-level environment variables or a secrets manager (do not store them in a shared plaintext file). Ensure the Python 'requests' package is available on the agent environment (the script will prompt to install it if missing). If you plan to use an account with limited rights for routine queries, prefer a non-admin user for safety (admin-only actions like book_fill are documented). Finally, because the skill executes a bundled script, review or sandbox it if you have stricter security requirements or if TALEBOOK_HOST is a remote/unknown server.

Like a lobster shell, security has layers — review code before you run it.

latestvk975hh36azzrp4kt6ykc0eqxa583h14b

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

Comments