Description

Work with HackMD documents. Use when reading, creating, updating, or deleting notes on HackMD. Supports change tracking to detect document modifications since last check. Supports personal and team workspaces.

README (SKILL.md)

HackMD Integration

Name: HackMD
Author: nulltea

Requirements

npm install -g @hackmd/hackmd-cli

Quick Reference

Read Notes

# List all personal notes
hackmd-cli notes

# Get note metadata (includes lastChangedAt)
hackmd-cli notes --noteId=\x3Cid> --output json

# Get note content (markdown)
hackmd-cli export --noteId=\x3Cid>

# List teams
hackmd-cli teams

# List team notes
hackmd-cli team-notes --teamPath=\x3Cpath>

Write Notes

# Create note
hackmd-cli notes create --content='# Title'

# Create from file
cat file.md | hackmd-cli notes create

# Update note
hackmd-cli notes update --noteId=\x3Cid> --content='# Updated'

# Delete note
hackmd-cli notes delete --noteId=\x3Cid>

Team Notes

hackmd-cli team-notes create --teamPath=\x3Cpath> --content='# Team Note'
hackmd-cli team-notes update --teamPath=\x3Cpath> --noteId=\x3Cid> --content='...'
hackmd-cli team-notes delete --teamPath=\x3Cpath> --noteId=\x3Cid>

Change Tracking

Use hackmd-track.js (in scripts/) to detect document changes efficiently.

Track a Note

node scripts/hackmd-track.js add \x3CnoteId>

Check for Changes

# Single note - outputs content only if changed
node scripts/hackmd-track.js changes \x3CnoteId>

# All tracked notes
node scripts/hackmd-track.js changes --all

# JSON output for parsing
node scripts/hackmd-track.js changes \x3CnoteId> --json

Manage Tracking

node scripts/hackmd-track.js list              # Show tracked notes
node scripts/hackmd-track.js remove \x3CnoteId>   # Stop tracking
node scripts/hackmd-track.js reset \x3CnoteId>    # Reset (next check shows as changed)

How It Works

hackmd-track.js add stores note's lastChangedAt timestamp
hackmd-track.js changes compares current lastChangedAt with stored value
If changed: outputs content and updates stored timestamp
If unchanged: outputs nothing (use --verbose for status)

State stored in ./.hackmd/tracked-notes.json (current working directory)

Note Metadata Fields

When using --output json, notes include:

Field	Description
`lastChangedAt`	Unix timestamp of last modification
`lastChangeUser`	`{name, userPath, photo}` of last editor
`titleUpdatedAt`	When title changed
`tagsUpdatedAt`	When tags changed

Rate Limits

100 calls per 5 minutes
2000 calls/month (10k on Prime plan)

Usage Guidance

This skill appears to do what it says: it wraps hackmd-cli and includes a small Node script to track note changes locally. Before installing: - Ensure HMD_API_ACCESS_TOKEN is scoped appropriately (only give the token the minimum permissions needed). - Confirm you have node and the hackmd-cli installed (SKILL.md directs npm -g install). Note: meta.json lists node as required even though the registry top-level requirements only list hackmd-cli—you will need node to run scripts. - Be aware the tracker writes state to a .hackmd directory in whatever working directory you run it from (./.hackmd/tracked-notes.json). - The script supports an undocumented HMD_API_ENDPOINT_URL env var to change the API base; if you set this, ensure it's a trusted endpoint. If you want full assurance, review scripts/hackmd-track.js yourself (it is included) to verify there are no unwanted network endpoints or behaviors.

Capability Analysis

Type: OpenClaw Skill Name: hackmd Version: 1.0.0 The skill is designed to interact with HackMD documents, supporting operations like reading, creating, updating, and tracking changes. The `SKILL.md` provides clear instructions for installing the `hackmd-cli` and using the provided `hackmd-track.js` script. The `hackmd-track.js` script manages local state in `./.hackmd/tracked-notes.json` and makes authenticated HTTPS requests to the official HackMD API using the `HMD_API_ACCESS_TOKEN` environment variable. Although `child_process` is imported, no command execution functions (like `execSync`) are actually used in `scripts/hackmd-track.js`, mitigating a significant risk. There is no evidence of data exfiltration, malicious execution, persistence, prompt injection against the agent, or obfuscation. All observed behaviors are aligned with the stated purpose.

Capability Assessment

✓ Purpose & Capability

The name/description match the actions implemented: reading, creating, updating, deleting HackMD notes and change-tracking. The skill requires hackmd-cli and an HMD_API_ACCESS_TOKEN which are expected for this integration.

ℹ Instruction Scope

Runtime instructions are constrained to installing/using hackmd-cli and a local Node script that calls the HackMD API and stores tracking state in ./ .hackmd/tracked-notes.json. One caveat: the script reads an additional environment variable (HMD_API_ENDPOINT_URL) to override the API base, but that env var is not documented in SKILL.md or listed in the declared requires.env.

✓ Install Mechanism

There is no automatic install spec; SKILL.md instructs the user to run npm install -g @hackmd/hackmd-cli. No remote, opaque downloads or archive extraction are performed by the skill package itself.

ℹ Credentials

The declared primary credential is HMD_API_ACCESS_TOKEN which is appropriate. The code also reads HMD_API_ENDPOINT_URL (undocumented) as an alternate API endpoint — this is an additional environment input that was not declared in requires.env and should be documented/considered before use.

✓ Persistence & Privilege

always is false and the skill does not request persistent platform privileges. It stores state only under the current working directory in .hackmd/tracked-notes.json and does not modify other skills or system-wide agent settings.

Version History

v1.0.0

Initial release with HackMD document management and change tracking. - Read, create, update, and delete personal and team notes using HackMD CLI. - Supports listing notes, exporting content, and viewing note metadata. - Provides utilities for tracking document changes (change detection via lastChangedAt). - Includes command-line scripts for managing tracked notes and checking for updates. - Supports rate limits and both personal and team workflows.

Metadata

Slug hackmd

Version 1.0.0

License —

All-time Installs 0

Active Installs 0

Total Versions 1

Frequently Asked Questions

What is HackMD?

Work with HackMD documents. Use when reading, creating, updating, or deleting notes on HackMD. Supports change tracking to detect document modifications since last check. Supports personal and team workspaces. It is an AI Agent Skill for Claude Code / OpenClaw, with 1024 downloads so far.

How do I install HackMD?

Run "/install hackmd" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is HackMD free?

Yes, HackMD is completely free (open-source). You can download, install and use it at no cost.

Which platforms does HackMD support?

HackMD is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created HackMD?

It is built and maintained by nulltea (@nulltea); the current version is v1.0.0.

More Skills

HackMD