Raindrop Sync

Sync and process bookmarks from Raindrop.io. Use when fetching new bookmarks, analyzing saved content, or syncing bookmarks to knowledge base. Triggers on "r...

This skill appears to do what it claims (fetch Raindrop bookmarks) and the included script is small and readable, but take these precautions before installing: 1) The registry metadata does NOT declare RAINDROP_TOKEN even though the script and SKILL.md require it — ensure you understand where/when you'll supply the token and prefer a platform-managed secret rather than a plaintext file in .secrets/. 2) If you must store the token on disk, keep it out of source control and restrict file permissions. 3) Confirm the only network calls are to api.raindrop.io (the script uses that URL). 4) Be aware the workflow instructs reading/writing memory/kb-index.json and appending to knowledge-base files — verify those paths do not expose sensitive data you don't want the skill to access. 5) If you want the platform to surface a permission prompt, ask the skill author to add RAINDROP_TOKEN to requires.env/primaryEnv in the metadata. If anything about where the token is stored or how the agent will be allowed to run the workflow is unclear, treat this as a potential privacy risk and inspect or run the script locally first.

Type: OpenClaw Skill Name: raindrop-sync Version: 1.0.0 The skill bundle is designed to fetch and process bookmarks from Raindrop.io for knowledge base integration. The `SKILL.md` provides clear instructions for setup and usage, including handling the API token via `.secrets/raindrop.env` and processing fetched data locally. The `scripts/fetch.py` script uses standard Python libraries to interact with the legitimate Raindrop.io API and output data to stdout or a specified local file. There is no evidence of data exfiltration to unauthorized endpoints, malicious command execution, persistence mechanisms, or prompt injection attempts designed to subvert the agent's core directives. All actions are consistent with the stated purpose.