← Back to Skills Marketplace
f-liva

BookStack API

by Federico Liva · GitHub ↗ · v1.0.2
cross-platform ✓ Security Clean
293
Downloads
0
Stars
0
Active Installs
3
Versions
Install in OpenClaw
/install bookstack-api
Description
BookStack Wiki & Documentation API integration. Manage your knowledge base programmatically: create, read, update, and delete books, chapters, pages, and she...
README (SKILL.md)

BookStack API Skill

Interact with a BookStack wiki through its REST API using the bundled Python script. No external dependencies beyond Python 3 standard library.

Configuration

Credentials live in ~/.clawdbot/clawdbot.json under the bookstack skill entry:

{
  "skills": {
    "entries": {
      "bookstack": {
        "env": {
          "BOOKSTACK_URL": "https://your-bookstack.example.com",
          "BOOKSTACK_TOKEN_ID": "your-token-id",
          "BOOKSTACK_TOKEN_SECRET": "your-token-secret"
        }
      }
    }
  }
}

Generate a token from BookStack: Profile > API Tokens > Create Token. The user's role needs the "Access System API" permission enabled.

Usage

All commands follow the pattern:

python3 scripts/bookstack.py \x3Ccommand> [args] [options]

Pass the env vars from the config above when executing.

Quick Reference

Action Command
Search search "query" [--type page|book|chapter]
List pages list_pages [--count N]
Read page get_page \x3Cid> [--content|--markdown]
Create page create_page --book-id \x3Cid> --name "Title" --html "\x3Cp>content\x3C/p>"
Update page update_page \x3Cid> --html "\x3Cp>new content\x3C/p>"
Delete page delete_page \x3Cid>

The same CRUD pattern applies to books, chapters, and shelves. For the full command list with all flags and options, see references/api-commands.md.

Important Notes

  • Cloudflare protection: The script sends a User-Agent header because BookStack instances behind Cloudflare reject requests without one (HTTP 403). If you get a 403, this is likely why.
  • Content formats: Pages accept HTML by default. Use --markdown for Markdown input. When reading, get_page --content returns HTML, --markdown returns Markdown.
  • Large HTML updates: For big page updates, prepare the HTML in a temp file and read it into the API call programmatically, rather than passing it inline on the command line.
Usage Guidance
This skill looks like a straightforward BookStack API client, but check two things before installing: (1) metadata mismatch — SKILL.md requires BOOKSTACK_URL, BOOKSTACK_TOKEN_ID, and BOOKSTACK_TOKEN_SECRET while the registry overview claimed no required env vars; confirm the installer will prompt for or populate those envs and where it reads them from. (2) Agent invocation scope — SKILL.md tells the agent to use the skill whenever docs/wiki are mentioned, which could cause the agent to call BookStack frequently or unexpectedly; review and control autonomous invocation or limit the skill to manual use if desired. Finally, create a BookStack API token with the minimum permissions required (preferably a non-admin token), test on a non-production instance, and verify the source repo or publisher (the _meta.json points to a GitHub repo) before granting credentials.
Capability Analysis
Type: OpenClaw Skill Name: bookstack-api Version: 1.0.2 The BookStack API skill is a standard integration for managing a BookStack wiki. The core logic in `scripts/bookstack.py` uses the Python standard library (`urllib.request`) to perform CRUD operations and searches against a user-configured BookStack instance. It correctly handles authentication via environment variables and includes a User-Agent to ensure compatibility with instances behind Cloudflare. No evidence of data exfiltration, malicious execution, or harmful prompt injection was found; the instructions in `SKILL.md` are appropriately scoped to the tool's intended purpose.
Capability Assessment
Purpose & Capability
Name, description, README, references, and the included Python script all align: the skill performs CRUD and search against a BookStack instance and requires a BookStack URL and API token. The requested env vars in SKILL.md (BOOKSTACK_URL, BOOKSTACK_TOKEN_ID, BOOKSTACK_TOKEN_SECRET) are appropriate for this purpose.
Instruction Scope
SKILL.md instructs storing credentials in ~/.clawdbot/clawdbot.json and passing them as env vars when running the bundled script; the script itself reads only environment variables (no direct file-read of the config), which is consistent but you should confirm your Claudebot runtime will export those env values. SKILL.md also instructs the agent to use this skill broadly whenever the user mentions 'update the docs' or 'check the wiki' — this is a policy/behavior choice (wide invocation surface) rather than hidden malicious behavior.
Install Mechanism
No install spec, no external downloads, and the script uses only Python standard library (urllib). No package registry or archive downloads detected.
Credentials
The only secrets the code reads are BOOKSTACK_URL, BOOKSTACK_TOKEN_ID, and BOOKSTACK_TOKEN_SECRET — all proportional to a BookStack integration. However, registry-level metadata in the provided overview listed 'Required env vars: none' while SKILL.md declares the three BookStack env vars; this metadata mismatch should be resolved before trusting automated installs.
Persistence & Privilege
always is false and the skill does not request system-wide config changes or persistent elevated privileges. The recommended location for credentials (~/.clawdbot/clawdbot.json) is local to the agent config and the script doesn't attempt to modify other skills or system settings.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install bookstack-api
  3. After installation, invoke the skill by name or use /bookstack-api
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.2
Add homepage and source URL for provenance verification
v1.0.1
Declare required env vars (BOOKSTACK_URL, BOOKSTACK_TOKEN_ID, BOOKSTACK_TOKEN_SECRET) in metadata for security scan compliance
v1.0.0
Initial release: full CRUD for books, chapters, pages, shelves. Full-text search. Cloudflare-compatible.
Metadata
Slug bookstack-api
Version 1.0.2
License
All-time Installs 0
Active Installs 0
Total Versions 3
Frequently Asked Questions

What is BookStack API?

BookStack Wiki & Documentation API integration. Manage your knowledge base programmatically: create, read, update, and delete books, chapters, pages, and she... It is an AI Agent Skill for Claude Code / OpenClaw, with 293 downloads so far.

How do I install BookStack API?

Run "/install bookstack-api" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is BookStack API free?

Yes, BookStack API is completely free (open-source). You can download, install and use it at no cost.

Which platforms does BookStack API support?

BookStack API is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created BookStack API?

It is built and maintained by Federico Liva (@f-liva); the current version is v1.0.2.

💬 Comments