← 返回 Skills 市场
Generate
Corpus
作者
doninocode
· GitHub ↗
· v1.0.1
441
总下载
0
收藏
1
当前安装
2
版本数
在 OpenClaw 中安装
/install corpus
功能描述
Access a user's Corpus library from OpenClaw. Use when the user asks to search saved content, fetch item details, save links into Corpus, or create reminders...
使用说明 (SKILL.md)
Corpus Skill
Use this skill to read and write a user's Corpus data through the Corpus API.
Required environment variables
CORPUS_API_TOKEN: user token for Corpus API access.
Generate CORPUS_API_TOKEN
- Install Corpus AI for iPhone:
https://apps.apple.com/us/app/corpus-ai/id6748364607 - Open the app and sign in.
- Go to
Integrations->OpenClaw. - Create an API token and copy it (the full value is shown once).
- Set that value as
CORPUS_API_TOKENin your OpenClaw skill env.
Optional environment variables
CORPUS_API_BASE_URL: API base URL (default:https://corpusai.app).CORPUS_TIMEOUT_SECONDS: HTTP timeout in seconds (default:30).
OpenClaw config example
{
"skills": {
"entries": {
"corpus": {
"path": "/absolute/path/to/skills/corpus",
"env": {
"CORPUS_API_TOKEN": "csk_live_or_jwt_token_here",
"CORPUS_API_BASE_URL": "https://corpusai.app"
}
}
}
}
}
Commands
Run all commands through:
python3 {baseDir}/scripts/corpus_api.py \x3Ccommand> [options]
Available commands:
profilelist-content --limit 20 --cursor \x3Ccursor>search --query "\x3Ctext>" --limit 8content --user-content-id \x3Cid>save-url --url \x3Curl> [--user-note "\x3Cnote>"]create-reminder --title "\x3Ctitle>" --description "\x3Cdesc>" --scheduled-date-utc "2026-02-18T16:00:00Z" [--user-content-id \x3Cid>]
Recommended workflow for implementation tasks
When a user asks for "find items in Corpus and implement":
- Use
searchwith a focused query. - Use
contentfor top hits to collect concrete steps. - Produce an implementation plan with explicit file changes.
- Apply code changes in the current working repository after user confirmation.
Safety rules
- Never print or log
CORPUS_API_TOKEN. - Prefer read operations before write operations.
- Before write operations (
save-url,create-reminder), confirm user intent if the instruction is ambiguous.
安全使用建议
This skill appears to do what it says: talk to the Corpus API using your CORPUS_API_TOKEN. Before installing or enabling it, verify you trust the skill source (the GitHub repo), store the token with least privilege (use a dedicated token you can revoke), and review the included scripts yourself. Be cautious when the agent proposes write actions or 'apply code changes' to your repository — require explicit user confirmation for any file modifications. Rotate or revoke the token if you stop using the skill.
功能分析
Type: OpenClaw Skill
Name: corpus
Version: 1.0.1
The `SKILL.md` contains an instruction for the AI agent to 'Apply code changes in the current working repository after user confirmation.' This instruction, while part of a legitimate workflow, introduces a significant prompt injection risk. If an attacker successfully manipulates the agent, this could lead to unauthorized file modifications in the user's repository, representing a high-impact vulnerability. The `scripts/corpus_api.py` code itself is benign, performing standard API interactions with the Corpus service (defaulting to https://corpusai.app) and handling the API token responsibly, without evidence of intentional malicious behavior like data exfiltration or arbitrary code execution.
能力评估
Purpose & Capability
Name/description (search, fetch, save, reminders) align with the declared requirements: python3 binary and a single CORPUS_API_TOKEN. The default API base URL matches the project homepage and the commands map to Corpus API endpoints.
Instruction Scope
SKILL.md stays within the Corpus API scope and warns not to print the token and to confirm writes. One notable instruction: the recommended workflow suggests applying code changes 'in the current working repository after user confirmation' — this is functional for implementation tasks but grants the agent a path to modify local files once the user consents. Confirmations and limited scope are recommended before any writes/edits.
Install Mechanism
No install spec; this is an instruction-only skill with a small included Python script. No downloads, package managers, or archive extraction are used.
Credentials
Only CORPUS_API_TOKEN is required (primaryEnv). Optional vars (CORPUS_API_BASE_URL, CORPUS_TIMEOUT_SECONDS) are documented. No unrelated secrets or config paths are requested.
Persistence & Privilege
always is false and the skill is user-invocable. The skill does not request persistent agent privileges or modify other skills' configuration.
如何使用
- 确保已安装 OpenClaw(本地或 Docker 部署)
- 在对话框中输入安装命令:
/install corpus - 安装完成后,直接呼叫该 Skill 的名称或使用
/corpus触发 - 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.1
- Added step-by-step instructions for generating and configuring the `CORPUS_API_TOKEN` via the Corpus AI iPhone app.
- No other changes to commands or functionality.
v1.0.0
Initial release of the Corpus skill:
- Enables access to a user's Corpus library for searching, fetching details, saving links, and creating reminders.
- Uses the Corpus API; requires a `CORPUS_API_TOKEN`.
- Provides commands for profile info, content listing, search, detail fetch, URL saving, and reminder creation.
- Includes safety rules to protect user tokens and confirms writes when intent is unclear.
元数据
常见问题
Corpus 是什么?
Access a user's Corpus library from OpenClaw. Use when the user asks to search saved content, fetch item details, save links into Corpus, or create reminders... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 441 次。
如何安装 Corpus?
在 OpenClaw 或 Claude Code 对话框中运行命令「/install corpus」即可一键安装,无需额外配置。
Corpus 是免费的吗?
是的,Corpus 完全免费(开源免费),可自由下载、安装和使用。
Corpus 支持哪些平台?
Corpus 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。
谁开发了 Corpus?
由 doninocode(@doninocode)开发并维护,当前版本 v1.0.1。
推荐 Skills