Zettel Link

This skill maintains the Note Embeddings for Zettelkasten, to search notes, retrieve notes, and discover connections between notes.

This skill appears to do what it says: index and search notes by sending note text to an embedding provider. Before installing or running it: (1) decide whether you want note content sent to remote APIs — use a local Ollama model for better privacy; (2) if you use OpenAI/Gemini, set API keys as environment variables instead of placing long-lived keys in the skill folder .env unless you trust the installation location; (3) inspect config/config.json and the scripts (already included) if you have concerns; (4) be aware the scripts will create a .embeddings directory inside the target notes directory to store caches and results. If you want stronger guarantees, run the code on a copy of your vault or run only with a local provider.

Type: OpenClaw Skill Name: zettel-link Version: 1.1.3 The OpenClaw skill 'zettel-link' is classified as benign. The Python scripts are designed for semantic search and linking of notes, using local or remote embedding providers. A critical security control is implemented in `scripts/embed.py` (and used by `scripts/search.py`): the `validate_url` function strictly enforces `ALLOWED_DOMAINS` for all API calls, preventing data exfiltration to arbitrary external endpoints. API keys are handled securely by reading from environment variables or a local `.env` file for legitimate API authentication, without any evidence of malicious intent or exfiltration. The `SKILL.md` and `README.md` files contain clear, functional instructions without any prompt injection attempts.