← 返回 Skills 市场
eth3rnit3

Alexandrie

作者 Eth3rnit3 · GitHub ↗ · v1.0.0
cross-platform ⚠ suspicious
2156
总下载
2
收藏
0
当前安装
3
版本数
在 OpenClaw 中安装
/install alexandrie
功能描述
CRUD operations for Alexandrie, a self-hosted Markdown note-taking app. Create, read, update, delete and search notes via REST API.
使用说明 (SKILL.md)

Alexandrie Skill

Interact with Alexandrie note-taking app at https://notes.eth3rnit3.org

Configuration

  • API URL: https://api-notes.eth3rnit3.org/api
  • Frontend: https://notes.eth3rnit3.org
  • Username: eth3rnit3
  • User ID: 671423603690045441
  • Password: Stored in /home/eth3rnit3/clawd/.env as ALEXANDRIE_PASSWORD

Usage

Use the alexandrie.sh script for all operations:

/home/eth3rnit3/clawd/skills/alexandrie/alexandrie.sh \x3Ccommand> [args]

Commands

Authentication

./alexandrie.sh login                    # Login and get token
./alexandrie.sh logout                   # Logout

Notes (Nodes)

./alexandrie.sh list                     # List all notes/categories
./alexandrie.sh get \x3CnodeId>             # Get a specific note with content
./alexandrie.sh search \x3Cquery>           # Search notes
./alexandrie.sh create \x3Cname> [content] [parentId]  # Create a note
./alexandrie.sh update \x3CnodeId> \x3Cname> [content]    # Update a note
./alexandrie.sh delete \x3CnodeId>          # Delete a note

Node Roles

  • role: 1 = Category/Workspace (container)
  • role: 3 = Document (note with content)

Current Structure

  • 671425872858841091 - Perso (category)
  • 671426069886271492 - Test (document)

Examples

List all notes

./alexandrie.sh login
./alexandrie.sh list

Read a note

./alexandrie.sh get 671426069886271492
# Returns: "Salut, ceci est un **test**"

Create a note

./alexandrie.sh create "My Note" "# Title\
\
Content here" 671425872858841091

Search

./alexandrie.sh search "test"

API Reference

Base URL: https://api-notes.eth3rnit3.org/api

Endpoints

  • POST /auth - Login (body: {"username": "...", "password": "..."})
  • POST /auth/logout - Logout
  • GET /nodes/user/:userId - List user's nodes
  • GET /nodes/:nodeId - Get node by ID (includes content)
  • GET /nodes/search?q=query - Search nodes
  • POST /nodes - Create node
  • PUT /nodes/:nodeId - Update node
  • DELETE /nodes/:nodeId - Delete node

Authentication

JWT token stored in cookies after login (/tmp/alexandrie_cookies.txt).

安全使用建议
This skill appears to be a straightforward CLI client for a self-hosted Alexandrie instance, but it has important inconsistencies you should address before installing: 1) The script expects ALEXANDRIE_PASSWORD to be stored in /home/eth3rnit3/clawd/.env (a user-specific path) even though the skill metadata declares no config paths or env vars — verify you are comfortable allowing the skill to source that file or change the skill to accept the password via an explicitly-declared environment variable. 2) The script uses curl and jq but the metadata does not declare these dependencies — ensure those binaries are available and come from trusted sources. 3) Confirm you trust the API endpoints (api-notes.eth3rnit3.org) and the skill author since there is no homepage or known source. If you need higher assurance, ask the publisher to (a) declare required env vars (ALEXANDRIE_PASSWORD) and config paths, (b) avoid hardcoded /home paths (use a configurable path or env var), and (c) provide a canonical source/homepage or signed release. If you install anyway, consider checking the /home/eth3rnit3/clawd/.env contents and rotating any secrets that were exposed during testing.
功能分析
Type: OpenClaw Skill Name: alexandrie Version: 1.0.0 The skill is classified as benign. It is designed to interact with the Alexandrie note-taking application, performing standard CRUD operations and authentication. The script `alexandrie.sh` reads the `ALEXANDRIE_PASSWORD` from `/home/eth3rnit3/clawd/.env` as explicitly documented in `SKILL.md`, which is a necessary step for its stated purpose of logging into the application. All network communications are directed to `api-notes.eth3rnit3.org`, and user inputs are safely handled using `jq` for JSON construction and URL encoding, mitigating common injection risks. There are no signs of data exfiltration beyond the scope of the application, malicious execution, persistence mechanisms, or prompt injection attempts in the `SKILL.md`.
能力评估
Purpose & Capability
The name/description (CRUD for Alexandrie) align with the included alexandrie.sh script and the SKILL.md API endpoints. However, the skill metadata declares no required environment variables or config paths while the script clearly depends on a password stored at /home/eth3rnit3/clawd/.env and a specific username; that mismatch is unexpected for a general-purpose skill.
Instruction Scope
The runtime instructions and script instruct the agent to source /home/eth3rnit3/clawd/.env for ALEXANDRIE_PASSWORD and to read/write /tmp files (/tmp/alexandrie_cookies.txt, /tmp/alexandrie_user_id). The SKILL.md and registry metadata do not declare those config paths or the required secret. The script only contacts the declared API domain and does not exfiltrate to other endpoints, but reading a user-specific .env is scope creep relative to the metadata.
Install Mechanism
There is no install spec (instruction-only plus a shell script). That minimizes install-time risk because nothing arbitrary is being downloaded or extracted during install.
Credentials
The skill needs a password (ALEXANDRIE_PASSWORD) but requires no env vars in its metadata; instead it sources a hardcoded /home/eth3rnit3/clawd/.env path. It also implicitly requires curl and jq on PATH, but the required binaries list is empty. Asking to read a user-specific .env (which may contain other secrets) is disproportionate and should be declared and justified.
Persistence & Privilege
The skill is not always:true and does not request persistent system-wide privileges. It writes only local temporary files (/tmp) and a user-specific token file, and does not attempt to modify other skills or global agent config.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install alexandrie
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /alexandrie 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.2
Removed hardcoded config - now uses env vars (ALEXANDRIE_API_URL, ALEXANDRIE_USERNAME, ALEXANDRIE_PASSWORD)
v1.0.1
Added description and metadata
v1.0.0
Initial release - CRUD notes for Alexandrie markdown note-taking app
元数据
Slug alexandrie
版本 1.0.0
许可证
累计安装 0
当前安装数 0
历史版本数 3
常见问题

Alexandrie 是什么?

CRUD operations for Alexandrie, a self-hosted Markdown note-taking app. Create, read, update, delete and search notes via REST API. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 2156 次。

如何安装 Alexandrie?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install alexandrie」即可一键安装,无需额外配置。

Alexandrie 是免费的吗?

是的,Alexandrie 完全免费(开源免费),可自由下载、安装和使用。

Alexandrie 支持哪些平台?

Alexandrie 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Alexandrie?

由 Eth3rnit3(@eth3rnit3)开发并维护,当前版本 v1.0.0。

💬 留言讨论