knowledge-capture
v1.0.0知识库捕获与自适应复习系统。触发词：「记住」「记下来」「加入知识库」「这个值得记」「帮我记住」「值得记录」。将对话中的知识点整理成结构化 Markdown 笔记，写入对应分类目录，自动生成题目加入题库（question-bank.json），并更新掌握度状态文件（mastery-status.json）和复习计划...
⭐ 0· 106·0 current·0 all-time
byFitzwilliam Zhang@qy-zhang
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (capture notes + adaptive review) matches the instructions: extract knowledge from conversation, generate Markdown notes, generate questions, and update local JSON mastery/plan files. There are no unrelated credential or binary requirements.
Instruction Scope
Instructions are limited to reading/writing structured files under a specific workspace and to interacting with the user for clarifications and scoring. However, the SKILL.md hardcodes an absolute path (/root/.openclaw/workspace/knowledge/) and instructs writing files there even though no config paths are declared in the metadata; this is a minor misalignment and means the skill expects filesystem write access to that location. Also the guidance does not mention input/path sanitization or conflict-handling (risk of overwriting existing files if titles/IDs are not safely normalized).
Install Mechanism
Instruction-only skill with no install spec and no code files — nothing is downloaded or installed by the skill itself.
Credentials
The skill requests no environment variables, credentials, or external endpoints. All required artifacts are local files within the workspace; the requested access is proportional to the stated purpose.
Persistence & Privilege
The skill will create and modify persistent files (notes, learning/question-bank.json, mastery-status.json, review plan). It does not set always:true and does not request system-wide privileges. Users should be aware these writes are persistent and could overwrite or conflict with other data in the same workspace path.
Assessment
This skill appears to do what it says: create structured Markdown notes, generate questions, and update local mastery/plan JSON files. Before installing, consider: 1) Confirm the exact workspace path (/root/.openclaw/workspace/knowledge/) — if your agent environment differs or you want files elsewhere, ask the skill author to make the path configurable. 2) Back up any existing data in that directory to avoid accidental overwrites. 3) Ask how the skill handles filename normalization, duplicates, and path traversal (e.g., titles containing ../). 4) Verify where scheduled review notifications will appear and whether the agent needs extra permissions to send them. 5) Because the skill writes persistent files, restrict the agent's filesystem permissions to the intended workspace if possible. If you see the skill later trying to contact external URLs or requesting credentials not mentioned here, revoke it and re-evaluate.Like a lobster shell, security has layers — review code before you run it.
latestvk97btmypnxzy57kfknwfx5c0zs83d5z0
License
MIT-0
Free to use, modify, and redistribute. No attribution required.