BookStack
v1.0.3BookStack Wiki & Documentation API integration. Manage your knowledge base programmatically: create, read, update, and delete books, chapters, pages, and shelves. Full-text search across all content. Use when you need to: (1) Create or edit wiki pages and documentation, (2) Organize content in books and chapters, (3) Search your knowledge base, (4) Automate documentation workflows, (5) Sync content between systems. Supports both HTML and Markdown content.
⭐ 3· 2.7k·2 current·2 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description match the included Python script and SKILL.md. The skill requires only BOOKSTACK_URL, BOOKSTACK_TOKEN_ID, and BOOKSTACK_TOKEN_SECRET and the script uses those to call BookStack's API endpoints (books, chapters, pages, shelves, search). There are no unrelated dependencies or surprising capabilities.
Instruction Scope
SKILL.md instructs running the included CLI script with commands that map directly to BookStack API operations. The runtime code only reads the declared BOOKSTACK_* environment variables and performs HTTP requests to the configured BOOKSTACK_URL. Minor note: the script frequently calls sys.exit() on errors or missing env vars which will terminate the CLI/agent process when errors occur — this is expected for a CLI tool but worth knowing if the skill is invoked by an agent expecting finer-grained error handling.
Install Mechanism
No install spec — the skill ships a Python script and SKILL.md. No remote downloads or package installs are requested, so nothing arbitrary is written to disk during installation beyond the existing skill files.
Credentials
The three required env vars directly correspond to authenticating with BookStack's API. The number and type of credentials are proportionate. As a precaution, tokens grant API access so users should provide a token with minimal necessary permissions and only to a trusted BookStack instance.
Persistence & Privilege
always is false and the skill does not request persistent system-wide permissions or modify other skills' configurations. It does not claim or require any elevated or platform-wide privilege.
Assessment
This skill appears to do what it claims — manage BookStack content. Before installing: (1) verify the skill source/owner since homepage is unknown, (2) only provide BookStack tokens that have the minimal required permissions (rotate or revoke if you stop using the skill), (3) ensure BOOKSTACK_URL points to a trusted instance, and (4) if you run this from an autonomous agent, be aware that the script uses sys.exit() on errors which can terminate the invoking process. If you need higher assurance, review the full scripts/bookstack.py file included in the package line-by-line (it is small and self-contained).Like a lobster shell, security has layers — review code before you run it.
latestvk97960jt1tmxj2yyx6ew5tjh0h80ydgx
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
EnvBOOKSTACK_URL, BOOKSTACK_TOKEN_ID, BOOKSTACK_TOKEN_SECRET