YoudaoNote Clip

网页剪藏到有道云笔记。触发词：剪藏网页、保存网页、收藏网页。

This skill appears to do what it claims (extract page HTML via the OpenClaw browser, download/compress images, and upload to a Youdao MCP endpoint). Before installing, consider: 1) Provide only the YOUDAONOTE_API_KEY unless you intend to use the Twitter/X path — the twitter flow can read APIFY_API_TOKEN from the environment if set. 2) Keep debug mode off (YOUDAONOTE_CLIP_DEBUG) unless you trust the skill and control the debug directory; debug writes metadata and short content previews to disk. 3) The skill will fetch images and page content and upload them to the MCP endpoint (default open.mail.163.com) and may call Apify when handling X/twitter URLs — review those endpoints if you need to restrict data flow. 4) If you need stronger guarantees about page-scoped privacy, audit the injected static injector (static/inject-sdk.fn.js) yourself — the package contains the injected parser source. 5) If you do not use the Twitter path, avoid setting APIFY_API_TOKEN. If you want me to, I can point out the exact lines that read optional env vars and the places where network uploads occur, or check the injected SDK for any network calls.

Type: OpenClaw Skill Name: youdaonote-clip Version: 1.21.8 The youdaonote-clip skill bundle is a sophisticated tool designed to save web content to Youdao Note. It employs a multi-stage pipeline including browser-based content extraction via the OpenClaw browser, image downloading and compression, and specialized scraping for Twitter/X using the Apify API. While the bundle includes a large, bundled JavaScript file (static/inject-sdk.fn.js) for DOM parsing across various Chinese platforms, the logic is consistent with its stated purpose of high-fidelity web clipping. It handles the required YOUDAONOTE_API_KEY through standard environment variables and communicates with legitimate service endpoints (open.mail.163.com and api.apify.com) without evidence of malicious exfiltration or unauthorized access.