功能描述

Work with HackMD documents. Use when reading, creating, updating, or deleting notes on HackMD. Supports change tracking to detect document modifications since last check. Supports personal and team workspaces.

使用说明 (SKILL.md)

HackMD Integration

Name: HackMD
Author: nulltea

Requirements

npm install -g @hackmd/hackmd-cli

Quick Reference

Read Notes

# List all personal notes
hackmd-cli notes

# Get note metadata (includes lastChangedAt)
hackmd-cli notes --noteId=\x3Cid> --output json

# Get note content (markdown)
hackmd-cli export --noteId=\x3Cid>

# List teams
hackmd-cli teams

# List team notes
hackmd-cli team-notes --teamPath=\x3Cpath>

Write Notes

# Create note
hackmd-cli notes create --content='# Title'

# Create from file
cat file.md | hackmd-cli notes create

# Update note
hackmd-cli notes update --noteId=\x3Cid> --content='# Updated'

# Delete note
hackmd-cli notes delete --noteId=\x3Cid>

Team Notes

hackmd-cli team-notes create --teamPath=\x3Cpath> --content='# Team Note'
hackmd-cli team-notes update --teamPath=\x3Cpath> --noteId=\x3Cid> --content='...'
hackmd-cli team-notes delete --teamPath=\x3Cpath> --noteId=\x3Cid>

Change Tracking

Use hackmd-track.js (in scripts/) to detect document changes efficiently.

Track a Note

node scripts/hackmd-track.js add \x3CnoteId>

Check for Changes

# Single note - outputs content only if changed
node scripts/hackmd-track.js changes \x3CnoteId>

# All tracked notes
node scripts/hackmd-track.js changes --all

# JSON output for parsing
node scripts/hackmd-track.js changes \x3CnoteId> --json

Manage Tracking

node scripts/hackmd-track.js list              # Show tracked notes
node scripts/hackmd-track.js remove \x3CnoteId>   # Stop tracking
node scripts/hackmd-track.js reset \x3CnoteId>    # Reset (next check shows as changed)

How It Works

hackmd-track.js add stores note's lastChangedAt timestamp
hackmd-track.js changes compares current lastChangedAt with stored value
If changed: outputs content and updates stored timestamp
If unchanged: outputs nothing (use --verbose for status)

State stored in ./.hackmd/tracked-notes.json (current working directory)

Note Metadata Fields

When using --output json, notes include:

Field	Description
`lastChangedAt`	Unix timestamp of last modification
`lastChangeUser`	`{name, userPath, photo}` of last editor
`titleUpdatedAt`	When title changed
`tagsUpdatedAt`	When tags changed

Rate Limits

100 calls per 5 minutes
2000 calls/month (10k on Prime plan)

安全使用建议

This skill appears to do what it says: it wraps hackmd-cli and includes a small Node script to track note changes locally. Before installing: - Ensure HMD_API_ACCESS_TOKEN is scoped appropriately (only give the token the minimum permissions needed). - Confirm you have node and the hackmd-cli installed (SKILL.md directs npm -g install). Note: meta.json lists node as required even though the registry top-level requirements only list hackmd-cli—you will need node to run scripts. - Be aware the tracker writes state to a .hackmd directory in whatever working directory you run it from (./.hackmd/tracked-notes.json). - The script supports an undocumented HMD_API_ENDPOINT_URL env var to change the API base; if you set this, ensure it's a trusted endpoint. If you want full assurance, review scripts/hackmd-track.js yourself (it is included) to verify there are no unwanted network endpoints or behaviors.

功能分析

Type: OpenClaw Skill Name: hackmd Version: 1.0.0 The skill is designed to interact with HackMD documents, supporting operations like reading, creating, updating, and tracking changes. The `SKILL.md` provides clear instructions for installing the `hackmd-cli` and using the provided `hackmd-track.js` script. The `hackmd-track.js` script manages local state in `./.hackmd/tracked-notes.json` and makes authenticated HTTPS requests to the official HackMD API using the `HMD_API_ACCESS_TOKEN` environment variable. Although `child_process` is imported, no command execution functions (like `execSync`) are actually used in `scripts/hackmd-track.js`, mitigating a significant risk. There is no evidence of data exfiltration, malicious execution, persistence, prompt injection against the agent, or obfuscation. All observed behaviors are aligned with the stated purpose.

能力评估

✓ Purpose & Capability

The name/description match the actions implemented: reading, creating, updating, deleting HackMD notes and change-tracking. The skill requires hackmd-cli and an HMD_API_ACCESS_TOKEN which are expected for this integration.

ℹ Instruction Scope

Runtime instructions are constrained to installing/using hackmd-cli and a local Node script that calls the HackMD API and stores tracking state in ./ .hackmd/tracked-notes.json. One caveat: the script reads an additional environment variable (HMD_API_ENDPOINT_URL) to override the API base, but that env var is not documented in SKILL.md or listed in the declared requires.env.

✓ Install Mechanism

There is no automatic install spec; SKILL.md instructs the user to run npm install -g @hackmd/hackmd-cli. No remote, opaque downloads or archive extraction are performed by the skill package itself.

ℹ Credentials

The declared primary credential is HMD_API_ACCESS_TOKEN which is appropriate. The code also reads HMD_API_ENDPOINT_URL (undocumented) as an alternate API endpoint — this is an additional environment input that was not declared in requires.env and should be documented/considered before use.

✓ Persistence & Privilege

always is false and the skill does not request persistent platform privileges. It stores state only under the current working directory in .hackmd/tracked-notes.json and does not modify other skills or system-wide agent settings.

版本历史

v1.0.0

Initial release with HackMD document management and change tracking. - Read, create, update, and delete personal and team notes using HackMD CLI. - Supports listing notes, exporting content, and viewing note metadata. - Provides utilities for tracking document changes (change detection via lastChangedAt). - Includes command-line scripts for managing tracked notes and checking for updates. - Supports rate limits and both personal and team workflows.

元数据

Slug hackmd

版本 1.0.0

许可证 —

累计安装 0

当前安装数 0

历史版本数 1

常见问题

HackMD 是什么？

Work with HackMD documents. Use when reading, creating, updating, or deleting notes on HackMD. Supports change tracking to detect document modifications since last check. Supports personal and team workspaces. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 1024 次。

如何安装 HackMD？

在 OpenClaw 或 Claude Code 对话框中运行命令「/install hackmd」即可一键安装，无需额外配置。

HackMD 是免费的吗？

是的，HackMD 完全免费（开源免费），可自由下载、安装和使用。

HackMD 支持哪些平台？

HackMD 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。

谁开发了 HackMD？

由 nulltea（@nulltea）开发并维护，当前版本 v1.0.0。

HackMD