← Back to Skills Marketplace
Mubu Integration
by
liuboacean
· GitHub ↗
· v1.0.0
· MIT-0
66
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install mubu-integration
Description
幕布笔记集成,支持登录认证、文档管理、文件夹操作、大纲导出等功能。触发词:幕布、mubu、大纲笔记、思维导图导出、幕布同步
Usage Guidance
This skill's code and SKILL.md implement the advertised Mubu operations, but the registry metadata failed to declare that it requires your Mubu phone number and password. If you install it: (1) only provide credentials you are willing to store; consider creating a dedicated or limited account; (2) be aware the script writes an unencrypted token file to ~/.mubu_token — check and restrict its filesystem permissions (chmod 600) or remove it when not needed; (3) confirm you trust the skill source (no homepage or known owner listed); (4) inspect the script yourself or run it in an isolated environment if you want to verify behavior before giving real credentials. If the metadata were corrected to declare required env vars and token persistence, the risk would be lower; as-is, proceed cautiously.
Capability Analysis
Type: OpenClaw Skill
Name: mubu-integration
Version: 1.0.0
The skill is a legitimate integration for the Mubu (mubu.com) outlining service, providing CLI and AI agent capabilities for document and folder management. It handles authentication via environment variables (MUBU_PHONE, MUBU_PASSWORD) and caches session tokens in a local file (~/.mubu_token), which is standard behavior for such tools. All network requests in scripts/mubu_api.py are directed to the official Mubu API (api2.mubu.com), and no evidence of data exfiltration, malicious execution, or prompt injection was found.
Capability Assessment
Purpose & Capability
Name/description promise a Mubu integration (login, doc/folder management, export). The included script implements those features and calls Mubu API endpoints, so capability matches purpose. However, the registry metadata lists no required environment variables or primary credential while the SKILL.md and scripts require MUBU_PHONE and MUBU_PASSWORD; this metadata omission is an incoherence (the skill needs credentials but the manifest doesn't declare them).
Instruction Scope
SKILL.md shows code snippets and usage that only call Mubu API endpoints, which is appropriate. But the runtime behavior in scripts/mubu_api.py reads/writes a token file at ~/.mubu_token and the README suggests an alternative config file ~/.workbuddy/.env.mubu; those filesystem accesses are not declared in registry metadata. The CLI also allows reading arbitrary local files when saving content (e.g., --file), which could cause the agent to read local files if invoked with such arguments. These file reads/writes are within the tool's domain but should be explicit in metadata/instructions.
Install Mechanism
No install spec is present (instruction-only plus a script). That minimizes installer risk — nothing is downloaded or executed automatically beyond the provided Python script. The script uses the requests library but does not install packages itself; the user would need Python and requests available.
Credentials
The skill legitimately needs MUBU_PHONE and MUBU_PASSWORD to log in, which is proportional to the stated functionality. However, the skill metadata did not declare these required environment variables or a primary credential, creating an expectation mismatch. Also the script persists JWT tokens locally in plaintext (~/.mubu_token), which increases the sensitivity of granting those credentials.
Persistence & Privilege
The skill does not request elevated platform privileges and is not 'always: true'. It does persist authentication tokens to ~/.mubu_token (JSON containing token, user id, username, expires_at) unencrypted; this is typical for CLI tools but is a privacy/credential persistence concern the user should be aware of.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install mubu-integration - After installation, invoke the skill by name or use
/mubu-integration - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release of mubu-integration:
- 支持幕布(mubu.com)账号登录与 Token 管理
- 提供创建、获取、更新、删除文档和文件夹的 API 接口
- 支持思维导图内容(大纲结构)获取与 Markdown 导出
- 涵盖基本的 Token 缓存与自动刷新
- 提供典型操作的 Python 接口实现与使用示例
- 适配幕布用户的主要大纲笔记和导出需求
Metadata
Frequently Asked Questions
What is Mubu Integration?
幕布笔记集成,支持登录认证、文档管理、文件夹操作、大纲导出等功能。触发词:幕布、mubu、大纲笔记、思维导图导出、幕布同步. It is an AI Agent Skill for Claude Code / OpenClaw, with 66 downloads so far.
How do I install Mubu Integration?
Run "/install mubu-integration" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Mubu Integration free?
Yes, Mubu Integration is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Mubu Integration support?
Mubu Integration is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Mubu Integration?
It is built and maintained by liuboacean (@liuboacean); the current version is v1.0.0.
More Skills