← 返回 Skills 市场
Flomo Notes
作者
Robert Shaw
· GitHub ↗
· v0.1.0
2362
总下载
4
收藏
5
当前安装
1
版本数
在 OpenClaw 中安装
/install flomo-notes
功能描述
Save notes to Flomo via the Flomo inbox webhook. Use when the user says "save to flomo", "记录到 flomo", "flomo note", or asks to store a note in flomo.
使用说明 (SKILL.md)
flomo-notes
Save notes to Flomo using a single webhook POST.
Setup
Provide your Flomo inbox webhook URL via environment variable:
FLOMO_WEBHOOK_URL(required), example:https://flomoapp.com/iwh/XXXXXXXX
You can set it either:
- In
~/.openclaw/openclaw.json(recommended):
{
skills: {
entries: {
"flomo-notes": {
env: {
FLOMO_WEBHOOK_URL: "https://flomoapp.com/iwh/XXXXXXXX"
}
}
}
}
}
- Or in your shell/service environment:
export FLOMO_WEBHOOK_URL="https://flomoapp.com/iwh/XXXXXXXX"
How the skill works
When triggered, run:
bash scripts/save_to_flomo.sh "\x3Cnote text>"
Example prompts (to trigger)
save to flomo: buy milk, eggs记录到 flomo：下周美股大事件...
Script manual test
FLOMO_WEBHOOK_URL="https://flomoapp.com/iwh/XXXXXXXX" \
bash scripts/save_to_flomo.sh "hello from openclaw"
Security
Treat the webhook URL like a secret: anyone with it can post into your Flomo inbox.
安全使用建议
This skill appears to do what it says (POST a note to your Flomo webhook) but there are a few issues to resolve before trusting it: (1) SKILL.md/README do not declare the required FLOMO_WEBHOOK_URL in the registry metadata — ensure you set FLOMO_WEBHOOK_URL in your OpenClaw config or environment before use. (2) The documentation shows invoking the script with an argument, but the script reads from stdin; to test safely, run: echo "your note" | FLOMO_WEBHOOK_URL="https://flomoapp.com/iwh/XXX" bash scripts/save_to_flomo.sh. (3) Make sure curl and python3 are available on the host. (4) Treat the webhook URL as a secret — anyone with it can post to your Flomo. Fixing the invocation mismatch (either change the script to accept an argument or update the docs to pipe input) and updating registry metadata to list FLOMO_WEBHOOK_URL and required binaries will resolve the main concerns.
功能分析
Type: OpenClaw Skill
Name: flomo-notes
Version: 0.1.0
The skill is designed to save user-provided notes to Flomo via a user-configured webhook. The `SKILL.md` provides clear instructions for the agent to execute `scripts/save_to_flomo.sh` with the note text. The `save_to_flomo.sh` script safely handles user input by using `python3` for JSON encoding, preventing shell or JSON injection, and then uses `curl` to POST the data to the `FLOMO_WEBHOOK_URL` provided by the user. There is no evidence of data exfiltration, malicious execution, persistence mechanisms, or prompt injection attempts against the agent. All actions are directly aligned with the stated purpose.
能力评估
Purpose & Capability
The skill's name, description, and code all align with the stated purpose: sending a note to a Flomo inbox webhook. Requesting a Flomo webhook URL is appropriate for this function.
Instruction Scope
SKILL.md instructs the agent to run `bash scripts/save_to_flomo.sh "<note text>"` (passing the text as a command-line argument), but the script reads the note from stdin (NOTE="$(cat)"). That mismatch means an agent that follows SKILL.md may hang or send an empty note. The instructions do otherwise stay within scope (they only post to the Flomo webhook), but the invocation mismatch is a functional and security-relevant inconsistency that should be fixed.
Install Mechanism
No install spec is provided (instruction-only with a small script), which is low-risk. However the README and script rely on curl and python3; the skill registry metadata lists no required binaries. The missing declared runtime binaries is an inconsistency (operational, not necessarily malicious).
Credentials
SKILL.md and the script require FLOMO_WEBHOOK_URL (and explicitly label it as a secret), but the skill's registry metadata reported 'Required env vars: none'. The single webhook secret is proportionate to the purpose, but the metadata omission is misleading and may cause an agent or integrator to run the skill without supplying the required credential.
Persistence & Privilege
The skill does not request always:true and is user-invocable only; it does not claim elevated persistence or modify other skills. This is appropriate for the stated function.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install flomo-notes - 安装完成后，直接呼叫该 Skill 的名称或使用
/flomo-notes触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v0.1.0
Initial release of flomo-notes
- Save notes to Flomo via the Flomo inbox webhook with a simple shell script.
- Recognizes prompts like "save to flomo", "flomo note", and related commands in English and Chinese.
- Requires the Flomo webhook URL to be provided as an environment variable for setup.
- Provides clear usage instructions and security precautions.
元数据
常见问题
Flomo Notes 是什么？
Save notes to Flomo via the Flomo inbox webhook. Use when the user says "save to flomo", "记录到 flomo", "flomo note", or asks to store a note in flomo. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 2362 次。
如何安装 Flomo Notes？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install flomo-notes」即可一键安装，无需额外配置。
Flomo Notes 是免费的吗？
是的，Flomo Notes 完全免费（开源免费），可自由下载、安装和使用。
Flomo Notes 支持哪些平台？
Flomo Notes 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Flomo Notes？
由 Robert Shaw（@xiaoluoboding）开发并维护，当前版本 v0.1.0。
推荐 Skills