Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Notes Skill / 笔记技能

v1.0.0

SQLite 笔记管理系统。由 AI agent(霜糖)代为管理和操作笔记。 触发场景: - 用户说"笔记..."、"记一下..."、"帮我记..."、"存一条笔记" - 用户说"找一下..."、"搜一下关于...的笔记" - 用户说"列出笔记"、"有哪些笔记" - 用户说"标记已整理"、"归档" - 用户说"备...

0· 88·1 current·1 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for cocoonovo/notes-skill.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Notes Skill / 笔记技能" (cocoonovo/notes-skill) from ClawHub.
Skill page: https://clawhub.ai/cocoonovo/notes-skill
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install notes-skill

ClawHub CLI

Package manager switcher

npx clawhub@latest install notes-skill
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
Name/description match the behavior: a local SQLite-based note manager storing data under ~/.openclaw/workspace/notes. The requested capabilities (create, search, list, archive, backup) align with a notes skill. However, the SKILL.md instructs the agent to run scripts at ~/.agents/skills/notes-skill/scripts/*.py even though no install spec and no code files are provided in the package—this discrepancy reduces coherence.
Instruction Scope
Instructions stick to note management (optimize content, insert/search/update the DB, perform backups). They reference only local paths (~/.openclaw/... and ~/.agents/...), and do not instruct network exfiltration. Concern: the agent is told to run arbitrary local Python scripts (init.py, backup.py) whose contents are not present for review; also SQL examples are shown as literal INSERTs (no guidance on parameterized queries), which could lead to unsafe SQL construction if not handled carefully.
!
Install Mechanism
No install spec (instruction-only) is lowest-risk normally. But the skill expects scripts to exist at ~/.agents/skills/notes-skill/scripts/*.py and provides no mechanism to install or audit them. That absence means either (a) the platform provides these scripts out-of-band (should be documented), or (b) required code is missing—both are concerns because runtime behavior depends on unseen code.
Credentials
The skill requests no environment variables, no credentials, and uses only local file paths. This is proportionate to a local notes manager.
Persistence & Privilege
always:false and user-invocable:true (default) — no elevated persistence is requested. Scheduled backups are described as triggered by OpenClaw cron, which is appropriate for a backup feature.
What to consider before installing
Before installing or enabling: 1) Confirm where ~/.agents/skills/notes-skill/scripts/init.py and backup.py come from — inspect their source code. Do NOT run the skill if those scripts are not provided or you cannot review them. 2) Verify the scripts do not contact external endpoints or exfiltrate data and that they run with least privilege. 3) Check that database and backups are stored with appropriate filesystem permissions (restrict access to your user). 4) If the agent will execute SQL, ensure queries are parameterized (avoid building raw SQL with unescaped user input). 5) If you want stronger isolation, run the skill in a sandboxed account or container. 6) If the missing scripts are supposed to be installed by the platform, ask the publisher/platform for the install manifest and full script sources; missing runtime code is the main reason this skill is marked suspicious.

Like a lobster shell, security has layers — review code before you run it.

latestvk973fk03q1vn09pgw81f497r0x841v0bnotesvk973fk03q1vn09pgw81f497r0x841v0bopenclawvk973fk03q1vn09pgw81f497r0x841v0bsqlitevk973fk03q1vn09pgw81f497r0x841v0b
88downloads
0stars
1versions
Updated 3w ago
v1.0.0
MIT-0

SQLite 笔记系统

数据库位置

~/.openclaw/workspace/notes/notes.db

初始化

首次使用时运行初始化脚本:

python3 ~/.agents/skills/notes-skill/scripts/init.py

该脚本会创建目录和表结构。

表结构

CREATE TABLE notes (
    id INTEGER PRIMARY KEY AUTOINCREMENT,
    content TEXT NOT NULL,
    archived INTEGER DEFAULT 0,
    created_at DATETIME DEFAULT (datetime('now', 'localtime'))
);
CREATE INDEX idx_notes_created ON notes(created_at DESC);
CREATE INDEX idx_notes_archived ON notes(archived);

写入笔记前的处理

收到笔记内容后,先优化再写入

  1. 结构优化:适当分段、补充标点、整理格式,使笔记更易读
  2. 错别字处理:修正明显的拼写错误,保持原意不变
  3. 不损失内容:不删减、不曲解原文,只优化表达方式

示例

  • 用户输入:今天学到了git clone 问题 报错 could not read Username
  • 优化后:今天学到了 GitHub clone 的问题:报错 "could not read Username"。原因是非 TTY 环境下 git 的凭证读取机制有问题...

SQL 示例

添加笔记

收到笔记内容后,先优化再写入(见上方处理规则)。优化完成后写入:

INSERT INTO notes (content) VALUES ('优化后的笔记内容');

搜索(LIKE 模糊搜索)

SELECT * FROM notes WHERE content LIKE '%关键词%';

列出全部(按时间倒序)

SELECT * FROM notes ORDER BY created_at DESC;

筛选未归档

SELECT * FROM notes WHERE archived = 0;

标记已归档

UPDATE notes SET archived = 1 WHERE id = 3;

查看单条

SELECT * FROM notes WHERE id = 1;

定时备份任务

每天凌晨 2 点自动备份(通过 OpenClaw cron 触发)。

Agent 收到 backup_notes 事件时,执行:

python3 ~/.agents/skills/notes-skill/scripts/backup.py 3

手动备份

运行备份脚本:

python3 ~/.agents/skills/notes-skill/scripts/backup.py [保留份数]
  • 不传参数:默认保留 7 份
  • 传参数:如 python3 backup.py 10 保留 10 份

备份文件保存在 ~/.openclaw/workspace/notes/backups/。

Comments

Loading comments...