功能描述

简洁优雅的想法记录工具 / Simple and elegant idea capture tool

使用说明 (SKILL.md)

Echo Seed / 回声种子

Name: Echo Seed
Author: zheznanohana

让每一个想法都有回声 🌱
Every idea deserves an echo.

简洁优雅的想法记录工具，支持快速记录、智能分类、时间线视图和多端同步。

A simple and elegant idea capture tool with quick notes, smart categorization, timeline view, and multi-platform sync.

🚀 快速开始 / Quick Start

启动服务 / Start Service

# 启动 Web 服务 / Start Web service
python3 scripts/echo-web.py

# 访问 / Visit
http://localhost:5000

📋 前置依赖 / Prerequisites

必需依赖 / Required

依赖 / Dependency	用途 / Purpose	配置说明 / Setup
Python 3.10+	运行环境 / Runtime	`python3 --version`
Flask	Web 框架 / Web framework	`pip install flask`
Requests	HTTP 请求 / HTTP client	`pip install requests`
SQLite	数据库 / Database	内置 / Built-in

可选依赖 / Optional

依赖 / Dependency	用途 / Purpose	配置说明 / Setup
Notion API	云端同步 / Cloud sync	需配置 API Key（见下文）
Google Calendar API	待办同步 / Todo sync	需配置 OAuth（见下文）
Telegram Bot	快速输入 / Quick input	需创建 Bot（见下文）
MiniMax API	AI 分析 / AI analysis	需配置 API Key（见下文）

🔧 配置步骤 / Setup Guide

1️⃣ 创建 Telegram Bot（可选）/ Create Telegram Bot (Optional)

用于快速创建种子 / For quick seed creation:

在 Telegram 中联系 @BotFather
发送 /newbot 创建新 Bot
设置 Bot 名称（如：Echo Seed Bot）
获取 Bot Token（格式：123456:ABC-DEF1234ghIkl-zyx57W2v1u123ew11）
将 Token 配置到 Bot 脚本中

Bot 命令列表 / Bot Commands:

/note - 创建笔记 / Create note
/idea - 创建灵感 / Create idea
/link - 创建链接 / Create link
/todo - 创建待办 / Create todo
/diary - 创建日记 / Create diary
/thought - 创建思考 / Create thought
/collect - 创建收藏 / Create collection
/voice - 创建语音 / Create voice
/list - 查看最近种子 / List recent seeds
/search - 搜索种子 / Search seeds
/stats - 统计信息 / Statistics

2️⃣ 配置 Notion API（可选）/ Configure Notion API (Optional)

用于云端同步 / For cloud sync:

访问 https://www.notion.so/my-integrations
创建新 Integration / Create new integration
复制 Internal Integration Token
在 config.yaml 中配置：

notion:
  enabled: true
  api_key: "your_notion_api_key"
  parent_page_id: "your_parent_page_id"

3️⃣ 配置 Google Calendar（可选）/ Configure Google Calendar (Optional)

用于待办事项同步 / For todo sync:

访问 Google Cloud Console
启用 Google Calendar API
创建 OAuth 2.0 凭证
下载 credentials.json 到项目目录

4️⃣ 配置 AI 服务（可选）/ Configure AI Service (Optional)

用于 AI 分析功能 / For AI analysis:

ai:
  enabled: true
  provider: "minimax"  # 或 "deepseek" / or "deepseek"
  api_key: "your_api_key"
  model: "MiniMax-M2.5"

📁 项目结构 / Project Structure

echo-seed/
├── scripts/
│   ├── echo-web.py          # Web 后端 / Web backend
│   ├── echo-telegram-bot.py # Telegram Bot
│   ├── db_helper.py         # 数据库助手 / Database helper
│   └── ai_service.py        # AI 服务 / AI service
├── templates/
│   └── index.html           # Web 界面 / Web UI
├── data/
│   └── echo.db              # SQLite 数据库 / Database
├── config.example.yaml      # 配置示例 / Config example
├── requirements.txt         # Python 依赖 / Dependencies
└── SKILL.md                 # 本文件 / This file

🤖 功能特性 / Features

📝 快速记录 - 8 种类型（笔记/灵感/链接/日记/思考/收藏/待办/语音）
🎨 智能分类 - 自动标签、颜色编码
📅 时间线视图 - 按时间浏览想法
🔍 搜索筛选 - 全文搜索、类型过滤
📊 统计面板 - 数据可视化
🤖 AI 增强 - 点子扩张、链接分析、智能关联
🔄 多端同步 - Notion、Google Calendar、Telegram Bot
📝 Quick Capture - 8 types (note/idea/link/diary/thought/collection/todo/voice)
🎨 Smart Categorization - Auto tags, color coding
📅 Timeline View - Browse by time
🔍 Search & Filter - Full-text search, type filter
📊 Statistics - Data visualization
🤖 AI Enhanced - Idea expansion, link analysis, smart relations
🔄 Multi-Platform Sync - Notion, Google Calendar, Telegram Bot

📖 详细文档 / Documentation

AI 功能说明 / AI Features: README-AI.md
GitHub 仓库 / GitHub Repo: https://github.com/zheznanohana/echo-seed

⚠️ 注意事项 / Notes

首次启动 会自动创建数据库 / Database auto-created on first run
配置文件 可选，无配置也可使用基础功能 / Config is optional
Telegram Bot 需要单独运行 / Bot runs separately
AI 功能 需要 API Key / AI requires API key

版本 / Version: 1.0.0
作者 / Author: @zheznanohana
许可证 / License: MIT

安全使用建议

This package appears to implement the advertised idea-capture features, but there are several red flags you should address before installing or running it: - Config vs code mismatch: The docs say to use config.yaml and environment variables, but the code uses hardcoded placeholder constants (NOTION_API_KEY, XIAOXIAOZHAO_CONFIG) and different file locations. Confirm where credentials must go and prefer environment variables over editing source files. - Storage location: db_helper stores the SQLite DB in ~/.openclaw/workspace/memory/capsules.db (agent workspace). That means the skill will read/write data in your agent's memory area rather than a project-local data/ directory. If you don't want cross-contamination, change DB_PATH to a project-local path before running. - Network endpoints: The code calls api.minimaxi.com and gateway.maton.ai rather than the public Notion/Google endpoints. Verify those endpoints are expected and trustworthy for your usage; do not provide real API keys until you confirm. - TLS verification disabled: fetch_url_content uses requests.get(..., verify=False) which will ignore HTTPS certificate validation — risky for fetching external URLs. Consider enabling certificate verification. - Missing/inconsistent files and imports: echo-telegram-bot imports echo_telegram (module not present in the manifest) and some code paths reuse the wrong API keys (Google Calendar POST uses NOTION_API_KEY). Expect to need code fixes before reliable use. - Automatic AI/calendar sync: The design triggers AI analysis automatically on creation and may auto-sync detected todos to calendars. If you do not want automatic outbound requests or calendar writes, disable those features or run the service offline. Recommendations: inspect and modify the source before running — move DB to a local path, fix configuration to accept env vars, enable TLS verification, verify external endpoints, and test in an isolated environment (container/VM) with dummy API keys. If you are not comfortable auditing the code, avoid providing real secrets and do not run it against production accounts.

功能分析

Type: OpenClaw Skill Name: echo-seed Version: 1.0.1 The skill bundle is classified as suspicious primarily because it routes sensitive Notion and Google Calendar API traffic through an unofficial third-party gateway (gateway.maton.ai) in scripts/echo-web.py, rather than using official API endpoints. This architecture creates a high risk of credential interception if users provide their API keys as instructed. Additionally, scripts/ai_service.py disables SSL certificate verification (verify=False) when fetching web content, which is a significant security vulnerability. While these choices may be intended to facilitate access in restricted network environments, the handling of secrets via a non-standard proxy is a major red flag.

能力评估

ℹ Purpose & Capability

Name/description (idea capture + optional AI/Notion/Calendar/Telegram sync) generally align with the included code (web UI, Telegram bot, AI service). However there are mismatches: SKILL.md/project docs describe config.yaml and data/echo.db, while db_helper uses ~/.openclaw/workspace/memory/capsules.db (agent memory path). External gateway endpoints (gateway.maton.ai, api.minimaxi.com) are used instead of direct Notion/Google endpoints which is unexpected and not documented clearly.

⚠ Instruction Scope

Runtime instructions and files direct the agent to run local Python servers and perform network calls, fetch webpages, and automatically trigger AI analysis and calendar sync. The code writes into the agent workspace DB path and log/queue files, and fetch_url_content disables TLS verification (verify=False). SKILL.md suggests configuring via config.yaml/env vars, but scripts mostly use hardcoded placeholders/constants, meaning behavior depends on editing files rather than explicit configuration — granting the skill broader filesystem and network reach than the SKILL.md declares.

✓ Install Mechanism

No heavy install mechanism is included; SKILL.md lists a simple pip install (Flask, requests). This is proportionate to a Python Flask app and low risk compared to download-and-extract installs.

⚠ Credentials

Registry metadata declares no required env vars, but the code expects API keys and uses constants (XIAOXIAOZHAO_CONFIG['api_key'], NOTION_API_KEY) and a config.yaml is suggested in docs. The skill also writes to the agent's OpenClaw workspace DB (~/.openclaw/.../capsules.db), which may hold other agent data — a higher-privilege storage location than a project-local data/ directory. The Notion and Google Calendar calls reuse NOTION_API_KEY for Google requests (bug/incoherent). Required credentials for external services are not clearly or safely handled.

⚠ Persistence & Privilege

always is false, but the code will create/modify a database in the agent's workspace (~/.openclaw/...), and write log/queue files in the project/logs directory. Writing into the agent memory path is notable because it can persist data in the agent's storage area (broader scope than a local data/ folder). The skill does not declare or limit that behavior.

版本历史

v1.0.1

Fix: 移除真名 / Remove real name

v1.0.0

Initial release

元数据

Slug echo-seed

版本 1.0.1

许可证 —

累计安装 0

当前安装数 0

历史版本数 2

常见问题

Echo Seed 是什么？

简洁优雅的想法记录工具 / Simple and elegant idea capture tool. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 350 次。

如何安装 Echo Seed？

在 OpenClaw 或 Claude Code 对话框中运行命令「/install echo-seed」即可一键安装，无需额外配置。

Echo Seed 是免费的吗？

是的，Echo Seed 完全免费（开源免费），可自由下载、安装和使用。

Echo Seed 支持哪些平台？

Echo Seed 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。

谁开发了 Echo Seed？

由 zheznanohana（@zheznanohana）开发并维护，当前版本 v1.0.1。

Echo Seed