← 返回 Skills 市场
balonegit

Appflowy Skill

作者 BaloneGit · GitHub ↗ · v0.1.0
cross-platform ⚠ suspicious
385
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install appflowy-skill
功能描述
AppFlowy Cloud/GoTrue API 的认证与调用流程(获取 token、workspace/文档/数据库/搜索等)。在本仓库用 Python 编写或调试 AppFlowy API 客户端、脚本、自动化或排查接口问题时使用。
使用说明 (SKILL.md)

AppFlowy API

概述

本 skill 用于自托管 AppFlowy 环境的 API 调用与自动化,覆盖登录鉴权、文档/视图/数据库操作、搜索、协作数据(collab)等常见场景。默认不读取 .env,仅在显式传入 --env \x3Cpath> 时读取。

本 skill 当前适配 AppFlowy Cloud 0.12.3doctor.py 会通过 /api/health 检测版本并在不匹配时给出警告。

快速开始

  1. 准备 base URL 与 GoTrue URL(可选 --env \x3Cpath> 读取 .env)。
  2. 使用账号密码获取 access_token
  3. 携带必要请求头调用 AppFlowy API。
# 获取 token
curl -sS -X POST "http://10.60.0.189/gotrue/token?grant_type=password" \
  -H "Content-Type: application/json" \
  -d '{"email":"\x3Cemail>","password":"\x3Cpassword>"}'
# 调用 API(示例:搜索)
curl -sS "http://10.60.0.189/api/search/\x3Cworkspace_id>?query=test" \
  -H "Authorization: Bearer \x3Caccess_token>" \
  -H "client-version: 0.12.3" \
  -H "client-timestamp: 1700000000000" \
  -H "device-id: \x3Cuuid>"

统一入口(推荐)

统一入口脚本用于封装命令风格,适合自动化与外部集成:

python skills/appflowy-api/scripts/appflowy_skill.py list
python skills/appflowy-api/scripts/appflowy_skill.py help apply-grid

配置优先级

解析优先级(从高到低):

  1. 命令行参数:--base-url--gotrue-url--client-version--device-id
  2. 配置文件:--config \x3Cpath>(JSON,示例见 skills/appflowy-api/references/config.example.json
  3. 环境变量:APPFLOWY_BASE_URLAPI_EXTERNAL_URLAPPFLOWY_GOTRUE_BASE_URL
  4. .env 文件:仅在传入 --env \x3Cpath> 时读取

常用脚本

# 获取 token
python skills/appflowy-api/scripts/get_token.py --email \x3Cemail> --password \x3Cpassword>
# 自检(不会自动读取 .env)
python skills/appflowy-api/scripts/doctor.py --config skills/appflowy-api/references/config.example.json --email \x3Cemail> --password \x3Cpassword>
# 生成“用户管理系统”文档(UTF-8 模板,表格顺序为正序)
python skills/appflowy-api/scripts/create_user_management_doc.py --config skills/appflowy-api/references/config.example.json --email \x3Cemail> --password \x3Cpassword>
# 就地修正文档(通用模板脚本)
python skills/appflowy-api/scripts/update_user_management_doc.py --config skills/appflowy-api/references/config.example.json --email \x3Cemail> --password \x3Cpassword> --workspace-id \x3Cworkspace_id> --view-id \x3Cview_id>
# 通用模板:按模板更新 Grid(默认就地修改)
python skills/appflowy-api/scripts/apply_grid_template.py --config skills/appflowy-api/references/config.example.json --email \x3Cemail> --password \x3Cpassword> --workspace-id \x3Cworkspace_id> --view-id \x3Cview_id> --template-file \x3Ctemplate.json>

子内容规则(子任务 / 子项 / 子 Grid)

  1. 子任务(Checklist/Todo 列):适用于简单描述的子内容,不需要额外字段。
  2. 子项(Relation 列):当子内容与父级字段结构一致时,通过关联行管理。
  3. 子 Grid:当子内容需要独立字段结构时,新建 Grid 并在父级引用或说明。

Grid 默认空行处理

新建 Grid 时可能自动生成 3 条空行。脚本在写入数据前会清理默认空行,避免空行混入真实计划。

必需请求头

所有 AppFlowy API 请求均需携带:

  1. Authorization: Bearer \x3Caccess_token>
  2. client-version: \x3CAppFlowy 版本>(建议与部署版本一致)
  3. client-timestamp: \x3CUnix 毫秒>
  4. device-id: \x3CUUID>

错误处理与排障

  1. HTTP 200 但响应体包含 success=falseerror 视为业务失败。
  2. 控制台提示无法连接时,优先检查宿主机 80/443 可达性与防火墙规则。
  3. 容器间调用优先使用内部地址(如 http://gotrue:9999http://appflowy_cloud:8000)。

资源

  1. skills/appflowy-api/scripts/:Python/Node 脚本与通用库。
  2. skills/appflowy-api/references/:API 参考与模板文件。
  3. skills/appflowy-api/references/templates/:UTF-8 模板,避免乱码与字段顺序问题。
  4. skills/appflowy-api/examples/:示例命令与用法。
安全使用建议
This skill appears to be a normal client/tooling bundle for self-hosted AppFlowy. Before installing or running it: 1) only provide your AppFlowy base/gotrue URLs and credentials if you trust the skill source; credentials (email/password or tokens) are required to operate against your instance. 2) The repo contains Node (.mjs) helpers and a package.json — inspect dependencies in package.json and avoid running untrusted node scripts without reviewing them. 3) The provided config.example shows an internal IP (10.60.0.189) as an example; verify you point the tool at your own AppFlowy endpoints. 4) If you need extra assurance, run the scripts in a sandboxed environment or review doc_grid_lib.py and the collab JS helpers to confirm they only operate on data passed to them and do not contact unexpected external endpoints.
功能分析
Type: OpenClaw Skill Name: appflowy-skill Version: 0.1.0 The skill is classified as suspicious due to the presence of Server-Side Request Forgery (SSRF) and arbitrary file read vulnerabilities. The `AppFlowyClient` in `scripts/appflowy_client.py` and `scripts/_common.py` allows `base_url` and `gotrue_url` to be fully controlled by user input (CLI arguments, config files, environment variables), enabling the skill to make requests to arbitrary internal or external network endpoints. Additionally, functions like `load_config`, `load_env`, `load_json_payload`, and `load_template` in `scripts/_common.py`, `scripts/apply_grid_template.py`, and `scripts/create_user_management_doc.py` accept user-controlled file paths, allowing the skill to read arbitrary files from the file system. While the skill's stated purpose is legitimate AppFlowy API automation, these capabilities could be exploited by an attacker to access internal services or sensitive local files if the agent is tricked into providing malicious inputs.
能力评估
Purpose & Capability
Name/description claim AppFlowy API automation and the repository contains Python/Node client code, helper scripts, API references, and templates that match that purpose. The included scripts implement token retrieval, workspace/database/document operations and template application — all coherent with the stated purpose.
Instruction Scope
SKILL.md instructs the agent/user to supply base/gotrue URLs and credentials (email/password or token) and to run the included scripts. The runtime instructions do not ask the agent to read unrelated system files or exfiltrate data to third-party endpoints; .env is only read when explicitly passed via --env.
Install Mechanism
There is no install spec (instruction-only from registry), and all code is bundled in the skill. No downloads or remote install URLs are present in the manifest. The repo contains a package.json and some .mjs helpers but there is no automatic installer declared.
Credentials
Registry metadata lists no required env vars, but the code legitimately supports and reads AppFlowy-related env vars (APPFLOWY_BASE_URL, API_EXTERNAL_URL / APPFLOWY_GOTRUE_BASE_URL, APPFLOWY_CLIENT_VERSION, APPFLOWY_DEVICE_ID) and optional .env/config files. This is proportionate to the skill's purpose, but the registry metadata could have declared these optional envs to be more explicit.
Persistence & Privilege
Skill does not request always:true, does not modify other skills, and does not claim persistent/system-wide privileges. It runs as invoked and uses local scripts and network calls to user-specified AppFlowy endpoints.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install appflowy-skill
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /appflowy-skill 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v0.1.0
Initial release of appflowy-api skill. - Provides authentication and API invocation flows for AppFlowy Cloud/GoTrue, including obtaining tokens and accessing workspace, document, database, and search APIs. - Supports Python client scripts for automation, debugging, and troubleshooting AppFlowy API issues. - Compatible with AppFlowy Cloud version 0.12.3 (with health check and version warning in doctor.py). - Unified command-line and script entry points with configurable priority for parameters, config files, and environment variables. - Includes example scripts for token retrieval, workspace management, document generation, and grid/template operations. - Documentation covers required API request headers, handling of default empty rows, and troubleshooting tips.
元数据
Slug appflowy-skill
版本 0.1.0
许可证
累计安装 0
当前安装数 0
历史版本数 1
常见问题

Appflowy Skill 是什么?

AppFlowy Cloud/GoTrue API 的认证与调用流程(获取 token、workspace/文档/数据库/搜索等)。在本仓库用 Python 编写或调试 AppFlowy API 客户端、脚本、自动化或排查接口问题时使用。 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 385 次。

如何安装 Appflowy Skill?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install appflowy-skill」即可一键安装,无需额外配置。

Appflowy Skill 是免费的吗?

是的,Appflowy Skill 完全免费(开源免费),可自由下载、安装和使用。

Appflowy Skill 支持哪些平台?

Appflowy Skill 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Appflowy Skill?

由 BaloneGit(@balonegit)开发并维护,当前版本 v0.1.0。

💬 留言讨论