siyuan-task-skill

Manage tasks in SiYuan Note via its HTTP API. Create, query, update, and organize tasks stored in the 任务清单 document (with a TASK database) and sub-documents for related materials. Use when the user mentions SiYuan, task management, or needs to track work items.

Key things to consider before installing: - The package contains a pre-filled config.env with a SIYUAN_API_TOKEN and a private/shared-space IP (100.64.0.11). This is sensitive — do not assume the token is harmless. If your runtime can reach that IP, the bundled token may allow access to someone else's SiYuan instance. - The skill metadata claims no required credentials, but the code needs SIYUAN_API_URL and SIYUAN_API_TOKEN and will read/write config.env. That mismatch indicates sloppy packaging or deliberate inclusion of credentials; either way you should not trust embedded tokens. - The code legitimately uses powerful API calls (create/remove docs, modify AV JSON via put_file). Those are expected for managing SiYuan tasks but can also be misused if the token is valid. Ensure the token has minimal privileges or use a dedicated token you control. - Recommended actions: ask the publisher for a source/homepage and a reason the token was bundled; replace the bundled config.env with your own values before running; review the full scripts locally; run the skill in an isolated environment or sandbox; and revoke the bundled token (or block the address) if you have any contact with that SiYuan instance. - If you cannot verify the origin or purpose of the embedded token/URL, avoid enabling autonomous invocation for this skill and prefer a version that requires you to explicitly supply credentials at runtime.

Type: OpenClaw Skill Name: siyuan-task-skill Version: 1.0.0 The skill is classified as suspicious due to several high-risk capabilities, even though they are plausibly needed for its stated purpose of managing tasks in SiYuan Note. Key indicators include the broad `Bash(python3:*)` permissions, the `upload_asset` function in `scripts/siyuan_api.py` which can read arbitrary local files and upload them to the SiYuan instance (a form of data exfiltration to the SiYuan application itself), and the `init_database` function in `scripts/task_ops.py` which rewrites the `config.env` file, demonstrating local file modification. Additionally, the `siyuan_api.py` client exposes powerful `sql_query`, `get_file`, and `put_file` methods that allow extensive interaction with the SiYuan internal database and file system, which could be misused if the agent or user input were compromised.