← Back to Skills Marketplace
90
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install neodb
Description
NeoDB 书影音标注助手 — 通过 API 替代网页/客户端完成所有 NeoDB 操作。支持搜索条目、标记（想看/在看/看过/放弃）、评分、短评、长评、笔记、收藏单、标签管理。触发场景：(1) 用户提到 NeoDB、书影音、标记、想看、看过、在读、读完、评分、评论 (2) 用户要搜索/标注书籍、电影、剧集、音乐...
Usage Guidance
This skill appears to do what it says (call NeoDB APIs), but be cautious: SKILL.md requires an OAuth token (NEODB_TOKEN) and optional NEODB_INSTANCE while the registry metadata does not declare those credentials — an omission that reduces transparency. The included scripts/setup-auth.sh will (1) register an OAuth app on the chosen NeoDB instance, (2) open a browser for you to authorize, and (3) save client_id, client_secret, and the access_token to scripts/.credentials.json and print the token. Before installing or running it:
- Review scripts/setup-auth.sh closely (it only talks to your chosen NeoDB instance, but it stores secrets locally).
- Do not run the script if you don't trust the instance you select. Prefer specifying the official/neodb.social instance if that's your intent.
- Consider creating an OAuth token manually in the instance UI and exporting it to your environment instead of running the script.
- If you run the script, move or protect scripts/.credentials.json and add it to .gitignore (the script already suggests this).
- Ask the skill author/registry to update the metadata to list NEODB_TOKEN (primaryEnv) and NEODB_INSTANCE so required permissions are explicit.
If you need a safer test: run the script in an isolated environment (VM/container) and avoid committing any credential files.
Capability Analysis
Type: OpenClaw Skill
Name: neodb
Version: 1.0.0
The NeoDB skill bundle is a legitimate tool for managing media logs (books, movies, music) via the NeoDB API. It includes a standard OAuth authentication script (scripts/setup-auth.sh) that handles token generation locally and provides clear instructions for the AI agent, including a mandatory requirement to confirm all write operations with the user. No evidence of data exfiltration, malicious execution, or harmful prompt injection was found.
Capability Assessment
Purpose & Capability
The skill claims to operate NeoDB via its API, which legitimately requires an OAuth token and (optionally) an instance hostname. The SKILL.md explicitly requires NEODB_TOKEN and NEODB_INSTANCE, but the registry metadata declares no required environment variables or primary credential — that inconsistency is unexpected and reduces transparency.
Instruction Scope
SKILL.md provides concrete curl templates and clearly limits operations to NeoDB API endpoints. It instructs storing NEODB_TOKEN (in ~/.claude/settings.json env) and to run the provided scripts/setup-auth.sh. The instructions promise user confirmation before write operations. No instructions request unrelated files, other service credentials, or exfiltration to unexpected endpoints.
Install Mechanism
There is no install spec (instruction-only skill). The only code file is a local bash auth helper; there are no downloads, package installs, or archive extraction steps. This is a low-risk install surface.
Credentials
The SKILL.md legitimately requires NEODB_TOKEN (OAuth access token) and optionally NEODB_INSTANCE. Those are proportional to the stated purpose. However the registry metadata does not declare these required env vars or a primaryEnv, which is an inconsistency. The included script also produces and stores client_id/client_secret and access_token locally — these are sensitive and should be explicitly declared and documented in metadata.
Persistence & Privilege
The setup script writes credentials to a local file (scripts/.credentials.json) and prints the access token; it also advises adding the token to ~/.claude/settings.json. The skill is not marked always:true and does not modify other skills, but local persistence of client_secret and access_token is a real sensitivity (risk of accidental commit or exposure) and should be considered before use.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install neodb - After installation, invoke the skill by name or use
/neodb - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release: search, mark, rate, review books, movies, music, games on NeoDB via API
Metadata
Frequently Asked Questions
What is NeoDB?
NeoDB 书影音标注助手 — 通过 API 替代网页/客户端完成所有 NeoDB 操作。支持搜索条目、标记（想看/在看/看过/放弃）、评分、短评、长评、笔记、收藏单、标签管理。触发场景：(1) 用户提到 NeoDB、书影音、标记、想看、看过、在读、读完、评分、评论 (2) 用户要搜索/标注书籍、电影、剧集、音乐... It is an AI Agent Skill for Claude Code / OpenClaw, with 90 downloads so far.
How do I install NeoDB?
Run "/install neodb" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is NeoDB free?
Yes, NeoDB is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does NeoDB support?
NeoDB is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created NeoDB?
It is built and maintained by Eric Yu (@gitnapp); the current version is v1.0.0.
More Skills