Personal Wiki

个人知识库（LLM Wiki）操作 skill。 当用户提到以下意图时触发： - Ingest：处理新内容、更新知识库、"处理IMA新内容"、"处理印象笔记"、"处理raw里的文件"、"帮我ingest" - Query：查 wiki、"wiki里有没有关于XX"、"从知识库里找XX" - Lint：整理wiki...

This skill appears coherent: it needs your Evernote developer token and your IMA client_id/api_key (stored under ~/.config/ima) so it can fetch notes, and it will read and write files in ~/wiki (pages, index.md, log.md) and process files under ~/wiki/raw/. Before installing: 1) Only grant a developer Evernote token you control and are willing to revoke (token lifespan noted as short — rotate it if needed). 2) Keep IMA credentials in a dedicated config, and consider creating a minimally-privileged access account if possible. 3) Review SKILL.md and README to confirm you are comfortable with the described file writes. 4) Install required Python packages and pdftotext from official sources; run in a controlled environment if you are concerned about parsing unknown files. 5) If you want stronger containment, run the skill in a sandboxed account or VM so its file writes are limited to a directory you control.

Type: OpenClaw Skill Name: personal-wiki Version: 1.0.0 The skill facilitates the creation of a personal knowledge base by ingesting data from Evernote, IMA notes, and local files. It exhibits high-risk behaviors including reading sensitive API credentials from the filesystem (~/.config/ima/) and environment variables, making external network requests via curl to ima.qq.com, and executing system commands via Python's subprocess for PDF processing. While these capabilities are aligned with the stated purpose of the skill (SKILL.md, README.md), the broad access to credentials and the use of shell/network tools represent a significant attack surface.