Readwise Article Saver
v1.0.0Save article links to Readwise Reader with automatic content-based tagging. Specialized handling for WeChat Official Account (微信公众号) articles. Use this skill...
⭐ 0· 74·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The skill's name/description match what the code does: saving URLs to Readwise and producing tags via an LLM. READWISE_TOKEN is required and used by the included Python scripts. OPENROUTER_API_KEY is listed as a required config (and shown in the example openclaw.json) because the SKILL.md expects the platform 'llm-task' to use an OpenRouter provider — but the Python scripts themselves do not reference OPENROUTER_API_KEY. Required binaries list includes python3 (used) and curl (declared but not used). These are minor mismatches but explainable by the skill’s use of the platform-level llm-task plugin.
Instruction Scope
SKILL.md instructs the agent to 'execute these steps immediately without asking for confirmation' whenever a user sends a URL. Runtime actions fetch full HTML (server-side for WeChat articles), call Readwise API (uploads URL/HTML), and send a text_preview to the llm-task tool for classification — which will forward data to your configured LLM provider. That behavior is within the stated purpose but has privacy implications (automatic transmission of article content to external services) and could surprise users if they expect manual confirmation.
Install Mechanism
This is an instruction-only skill with bundled, locally-included Python scripts. There is no external download/install spec, no archive extraction, and no third-party install URL. Risk from install mechanism is low.
Credentials
The scripts legitimately require READWISE_TOKEN to call Readwise. OPENROUTER_API_KEY is required only to enable the platform llm-task provider in the example config (not read by the Python files). The skill asks for two configuration values in openclaw.example.json; that is reasonable for its workflow but may surprise users who expect only a Readwise token. No other secrets are requested. Declaring curl as a required binary is unnecessary given the included Python code.
Persistence & Privilege
The skill does not request always:true and does not modify other skills or global agent settings. It relies on normal autonomous invocation (llm-task and exec) which is the platform default. The main privilege concern is behavioural (automatic saves) rather than installation or persistent elevated privileges.
Assessment
Before installing: (1) Understand that the skill will automatically fetch article HTML and save/send it to Readwise and to whatever LLM provider you configure for llm-task (e.g., OpenRouter). If that data may contain sensitive content, do not enable automatic saving. (2) The only script-level secret required is READWISE_TOKEN; OPENROUTER_API_KEY is needed only if you want automatic LLM tagging via the platform — you can disable llm-task or not provide that key if you prefer to tag manually. (3) The code is small and readable (no hidden endpoints or obfuscated code), but SKILL.md explicitly tells the agent to act without confirmation; consider removing automatic invocation or requiring confirmation, and ensure exec and llm-task are only allowed for agents you trust. (4) The declared required binary 'curl' is not used by the bundled scripts—this is harmless but sloppy. (5) If you proceed, test with non-sensitive URLs first, and review openclaw.json settings and the two Python scripts to confirm behavior matches your privacy/security requirements.Like a lobster shell, security has layers — review code before you run it.
latestvk9747x839nfx5j8nj0rgw633m183hwcr
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
Binspython3, curl
ConfigREADWISE_TOKEN, OPENROUTER_API_KEY