Youdao Note Web

v1.0.0

安全地操作用户的有道云笔记,支持读取、搜索、创建笔记。当用户要求操作有道云笔记时调用。

1· 267·1 current·1 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for wendy199804/youdaonote-web.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Youdao Note Web" (wendy199804/youdaonote-web) from ClawHub.
Skill page: https://clawhub.ai/wendy199804/youdaonote-web
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install youdaonote-web

ClawHub CLI

Package manager switcher

npx clawhub@latest install youdaonote-web
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
Name/description say it will read, search, list, and create Youdao notes. The package contains a Python script that calls note.youdao.com endpoints and asks for the browser Cookie via YOUDAO_COOKIE — this is expected and proportional.
Instruction Scope
SKILL.md explicitly requires the full browser Cookie in an environment variable (not in chat) and instructs the agent to perform searches, list directories, read single notes, or read all notes in a folder then produce an analysis report. Reading and analyzing an entire folder is within the skill's purpose but grants the agent broad access to potentially large/private data; consider requiring explicit user confirmation before bulk-read/analysis.
Install Mechanism
There is no install spec that downloads arbitrary code; included files are a Python script and a requirements.txt (requests, brotli). This is low risk and consistent with running the script locally after installing standard Python packages.
Credentials
The only required secret is the full Youdao browser cookie via YOUDAO_COOKIE. The code extracts specific session cookies (YNOTE_CSTK, YNOTE_LOGIN, YNOTE_SESS) which are necessary for web-authenticated calls — asking for the cookie is proportionate but sensitive.
Persistence & Privilege
Skill is not always-on and does not request elevated platform privileges. It does not modify other skills or system-wide settings and relies on runtime environment variable for auth.
Assessment
This skill appears to do exactly what it claims: talk to note.youdao.com using your browser session cookie. Before installing, consider: (1) YOUDAO_COOKIE contains sensitive session tokens — never paste it into chat and prefer storing it as a user-scoped environment variable; (2) the skill can read entire folders and will by design produce aggregated analyses, so only allow it to access folders you want processed and require explicit confirmation before bulk-reading; (3) run the Python script in a trusted environment after reviewing the youdao_api.py file yourself; (4) if you suspect the cookie has been exposed, log out of Youdao and rotate your session (re-login) to invalidate old cookies. If you want stricter control, modify the workflow so the agent asks the user to approve each note or batch before analysis.

Like a lobster shell, security has layers — review code before you run it.

latestvk977ttma5snc45k372qkcfnkh183jjyf
267downloads
1stars
1versions
Updated 1mo ago
v1.0.0
MIT-0

Youdao Note Skill

这个 Skill 允许大模型代理安全地操作用户的有道云笔记 (Youdao Note)。 使用 Cookie 认证(从浏览器 F12 获得),所有凭证通过环境变量 YOUDAO_COOKIE 注入脚本,不硬编码、不在对话中明文传输。

核心能力

  1. 列出目录list — 获取根目录或指定目录下的所有文件和文件夹。
  2. 搜索笔记search — 通过关键词搜索云笔记。
  3. 读取笔记read — 通过 File ID 获取云笔记内容。
  4. 创建笔记create — 在指定目录下创建新笔记。

环境变量设置

获取完整 Cookie

  1. 在浏览器打开 有道云笔记网页版 并登录。
  2. F12 → 切换到 Network 面板 → 刷新页面。
  3. 点击任意一个 XHR 请求(如 check-alive)。
  4. Request Headers 中找到 Cookie,复制完整字符串值。

设置环境变量

Windows (PowerShell)

[System.Environment]::SetEnvironmentVariable(
    "YOUDAO_COOKIE",
    "从浏览器复制的完整Cookie字符串",
    "User"
)

⚠️ 添加到用户变量即可,不需要系统变量。重启终端让变量生效。

代理使用指南

1. 搜索笔记 (推荐作为入口)

如果不知道目录 ID,可以直接搜索,从搜索结果中获取目录和文件 ID:

py youdao_api.py search "关键词"

2. 列出指定目录文件

由于部分账号结构问题,默认根目录获取可能失败,推荐直接通过 URL 或搜索结果获取目录 ID(如 WEBe72b0f1a...):

py youdao_api.py list --dir "目录ID"

3. 读取单篇笔记内容

py youdao_api.py read "笔记的FileID"

4. 读取目录下所有笔记

这个命令会遍历指定目录,把该目录下所有非文件夹的笔记内容一次性读取出来:

py youdao_api.py read_all "目录ID"

5. 创建新笔记

# 在指定目录创建(推荐)
py youdao_api.py create "标题" "内容" --dir "目录ID"

工作流 (Workflow)

当用户发出诸如 “分析我的有道工作日志文件夹” 的指令时,代理应遵循以下自动化工作流,将“读取”与“分析”一步完成:

  1. 定位目标: 使用 search 命令或基于用户提供的关键词查找目标文件夹(如“工作日志”)。
    py youdao_api.py search "工作日志"
    
  2. 批量读取: 获取到目标文件夹的 ID 后,使用 read_all 命令一键提取该目录下所有的笔记内容。
    py youdao_api.py read_all "文件夹ID"
    
  3. 自动深度分析(关键步): 在获取到日志内容后,代理不要仅限于展示内容,必须主动对数据进行综合分析。例如:
    • 梳理核心进展:提取关键的工作成果与里程碑。
    • 识别风险与待办:提炼出尚未解决的问题(Blockers)或后续计划(To-Dos)。
    • 趋势与高频主题:总结这段时间内主要投入精力的工作方向。
    • 最终向用户输出一份结构化、清晰的分析报告(如使用 Markdown 表格、项目符号等)。

安全规范

  • 禁止 在代码或对话中硬编码 Cookie。
  • 禁止 要求用户直接在聊天窗口输入凭证。
  • 所有认证均通过环境变量完成。

Comments

Loading comments...