Evernote Yinxiang

v1.0.0

印象笔记（Yinxiang/Evernote）集成技能。用于创建、读取、搜索、删除笔记，以及管理笔记本和标签。当用户提到"印象笔记"、"evernote"、"创建笔记到印象笔记"、"搜索印象笔记"、"查看笔记"、"笔记同步"、"保存到印象笔记"时触发。仅依赖 requests，无需安装 evernote SDK。

⭐ 0· 137·0 current·0 all-time

by@vikingr2023

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for vikingr2023/evernote-yinxiang.

Previewing Install & Setup.

Prompt PreviewInstall & Setup

Install the skill "Evernote Yinxiang" (vikingr2023/evernote-yinxiang) from ClawHub.
Skill page: https://clawhub.ai/vikingr2023/evernote-yinxiang
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install evernote-yinxiang

ClawHub CLI

Package manager switcher

npx clawhub@latest install evernote-yinxiang

Security Scan

VirusTotal

Benign

View report →

OpenClaw

Suspicious

high confidence

Purpose & Capability

The SKILL.md claims the skill uses only requests and does not require the evernote SDK, but scripts/yinxiang.py imports thrift, evernote.edam modules and certifi. That is inconsistent: the code depends on the Evernote Thrift-based interfaces (and an Evernote SDK package) rather than a simple REST requests client.

Instruction Scope

SKILL.md documents RESTful endpoints and Authorization: Bearer <Token> usage, but the code constructs a Thrift note_store URL (https://{host}/edam/note/{user_id}) and uses a Thrift THttpClient with custom headers. The instructions and the implementation disagree about API shape and auth semantics. The runtime instructions do instruct placing YINXIANG_TOKEN in a .env and to run the script, which the code does read — but the mismatch between docs and code is a scope/integration inconsistency.

Install Mechanism

There is no install spec, yet the script requires external Python packages (thrift, evernote SDK package providing evernote.edam.*, and certifi). Without declared installation steps, an agent or user may need to pip-install packages from PyPI — the skill should declare dependencies or provide a vetted install path. The absence of an install mechanism plus undisclosed dependencies is a risk and operational surprise.

ℹ

Credentials

Only a single account token (YINXIANG_TOKEN) is used, which aligns with the skill's purpose. However, the SKILL.md explicitly warns the token grants full account access; because the code will send that token to the Evernote/Yinxiang host and uses it with Thrift calls, the token is sensitive. The skill does not request unrelated credentials or config paths.

✓

Persistence & Privilege

The skill does not request always:true, does not modify other skills, and has no install-time persistence spec. It reads a local .env in its own directory and environment variables — normal for this type of CLI integration.

What to consider before installing

This skill contains mismatches between its documentation and actual code. Before installing or running it: (1) Confirm the source/origin — there is no homepage or repository link. (2) Inspect and trust the required Python packages (thrift, the evernote SDK package providing evernote.edam.*, and certifi) before installing; prefer installing them in an isolated virtualenv or sandbox. (3) Be aware YINXIANG_TOKEN grants full account access — do not reuse a high-privilege token for testing. (4) Ask the publisher to clarify and update SKILL.md (requests vs Thrift, REST endpoints vs edam endpoints) and to provide a proper install spec (requirements.txt or pip/packaging instructions). (5) If you cannot validate the origin or dependencies, avoid installing or run only in a locked-down environment. If you proceed, verify file permissions on the .env and consider creating a dedicated, limited test account/token.

Like a lobster shell, security has layers — review code before you run it.

latestvk977pahsyzfkd9zfbccn4n2g8d83x8w2

137downloads

0stars

1versions

Updated 4w ago

v1.0.0

MIT-0

印象笔记技能

通过印象笔记 REST API 操作笔记，仅依赖 requests，无需安装过时的 evernote3 SDK。

首次配置

访问 https://app.yinxiang.com/api/DeveloperToken.action 获取开发者 Token（S= 开头）
在技能目录下创建 .env 文件，填入 Token：

YINXIANG_TOKEN=S=你的Token

.env 文件路径：~/.qclaw/skills/evernote-yinxiang/.env

CLI 用法

脚本位置：~/.qclaw/skills/evernote-yinxiang/scripts/yinxiang.py

创建笔记： python3 scripts/yinxiang.py create "标题" "内容" [--notebook GUID] [--tags tag1,tag2]

搜索笔记： python3 scripts/yinxiang.py search "关键词" [--max 20]

获取笔记详情： python3 scripts/yinxiang.py get <GUID>

删除笔记： python3 scripts/yinxiang.py delete <GUID>

列出笔记本： python3 scripts/yinxiang.py notebooks

列出标签： python3 scripts/yinxiang.py tags

所有命令输出 JSON，success: true/false 表示成败。

Agent 使用指南

执行任何命令前先检查 Token 是否配置（.env 文件存在且含 YINXIANG_TOKEN）。

创建笔记示例： python3 ~/.qclaw/skills/evernote-yinxiang/scripts/yinxiang.py create "会议纪要" "今天讨论了项目进度..." --tags "工作,会议"

内容支持 HTML，纯文本会自动包裹 p 标签。

API 端点

基础 URL：https://app.yinxiang.com/third/third-party-note-service/restful/v1

端点列表：

/createNote POST 创建笔记
/getNote POST 获取笔记
/findNotes POST 搜索笔记
/deleteNote POST 删除笔记
/listNotebooks POST 列出笔记本
/listTags POST 列出标签