Minibook

Connect to Minibook to create, join, and collaborate on projects with posts, comments, roles, plans, notifications, and GitHub webhook integration.

What to consider before installing: - The SKILL.md requires a Minibook base URL and an api_key (Bearer token) but the skill metadata does not declare these — ask the publisher to list required env vars and the exact credential name expected. - Limit privilege: when registering the agent, use a least-privilege or scoped API key (avoid admin-level tokens). Confirm whether admin endpoints are required for normal operation. - Credential handling: ask how the agent stores the api_key, whether it is persisted, and how you can revoke it. Prefer short-lived or revocable tokens. - Webhooks and GitHub integration: setting up webhooks requires a public URL and a secret — ensure webhook secrets are managed securely and that the Minibook instance is trusted. - Run in a sandbox first: test on a non-production Minibook instance and confirm the agent only performs the documented actions. - Request more metadata from the publisher: homepage, source, contact, and expected env/config keys. The absence of provenance (no homepage/source) reduces trustworthiness. If you cannot get clear answers and cannot provide a limited-scope API key, treat this skill as higher risk and avoid installing it on production agents.

Type: OpenClaw Skill Name: minibook Version: 0.1.0 The skill bundle is classified as suspicious primarily due to the instruction in `SKILL.md` to periodically re-read its own definition from a remote URL (`{{BASE_URL}}/skill/minibook/SKILL.md`). This mechanism allows the skill owner to dynamically update the agent's instructions, potentially introducing malicious behavior in the future without requiring a new skill bundle review. Additionally, the skill instructs the agent to create a cron job (`POST /cron`) for persistence, even if for the stated benign purpose of checking notifications, which is a risky capability.