← 返回 Skills 市场
nickian

Karakeep Save

作者 nickian · GitHub ↗ · v1.0.0
cross-platform ⚠ suspicious
1546
总下载
1
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install karakeep-save
功能描述
Save bookmarks to Karakeep (self-hosted bookmark manager). Use when the user wants to save a URL, bookmark a link, or add something to their reading list.
使用说明 (SKILL.md)

Karakeep

Save bookmarks to a self-hosted Karakeep instance.

Setup

Set these environment variables (in your shell profile or Clawdbot config):

export KARAKEEP_URL="https://your-karakeep-instance.com"
export KARAKEEP_API_KEY="your-api-key"

To get your API key: Karakeep → Settings → API Keys → Create new key.

Save a bookmark

{baseDir}/scripts/save.sh "\x3CURL>" ["optional note"]

Examples:

{baseDir}/scripts/save.sh "https://example.com/article"
{baseDir}/scripts/save.sh "https://github.com/repo" "Interesting project to check out"

API Details

  • Endpoint: POST {KARAKEEP_URL}/api/v1/bookmarks
  • Auth: Bearer token
  • Body: {"type": "link", "url": "...", "note": "..."}

Response

Returns JSON with bookmark ID. Tags will be auto-generated by Karakeep's AI.

安全使用建议
This skill appears to do what it says (POST a bookmark to your Karakeep server) but the package metadata omits important runtime requirements. Before installing: 1) Inspect scripts/save.sh yourself — it will send the URL and optional note to KARAKEEP_URL using KARAKEEP_API_KEY. 2) Ensure you have curl and jq installed (the script depends on them). 3) Store KARAKEEP_API_KEY securely (environment or secret store) and confirm KARAKEEP_URL is the correct HTTPS endpoint. 4) Because the owner and homepage are unknown, prefer running the script in a sandbox or local review first; ask the publisher to update metadata to declare required env vars and binaries so automated checks and users are not misled.
功能分析
Type: OpenClaw Skill Name: karakeep-save Version: 1.0.0 The skill is designed to save bookmarks to a user's self-hosted Karakeep instance. It requires the user to provide `KARAKEEP_URL` and `KARAKEEP_API_KEY` environment variables, which are then used by the `scripts/save.sh` script to make an authenticated `curl` request to the specified endpoint. Input sanitization for the JSON body is handled safely using `jq`. There is no evidence of data exfiltration beyond the intended API interaction, malicious execution, persistence mechanisms, or prompt injection attempts against the agent in SKILL.md. All actions are directly aligned with the stated purpose.
能力评估
Purpose & Capability
The skill's name and description match the included script: it POSTs a bookmark to a Karakeep instance. However, the registry metadata declares no required environment variables or binaries, while the SKILL.md and scripts/save.sh clearly require KARAKEEP_URL and KARAKEEP_API_KEY and use external tools (curl and jq). This mismatch between declared requirements and actual runtime needs is a coherence problem.
Instruction Scope
SKILL.md instructs the agent to call scripts/save.sh with a URL and optional note and to set two environment variables. The instructions are narrowly scoped to saving bookmarks and do not request reading unrelated files or other credentials. The script only sends the bookmark data (url, note) to the configured Karakeep API.
Install Mechanism
There is no install spec (instruction-only), which minimizes install-time risk. However, the runtime script depends on common CLI tools (curl and jq) that are not declared in the metadata; the skill does not install them or verify their presence beyond failing if they're absent. This omission should be corrected or documented.
Credentials
The environment variables the skill needs (KARAKEEP_URL and KARAKEEP_API_KEY) are appropriate and proportionate for a bookmark-saving skill. The concern is that the metadata lists no required env vars, so a user or automated installer may not realize these secrets are needed or where they'll be used. The script will send the API key as a Bearer token to the configured URL (expected for the stated purpose).
Persistence & Privilege
The skill does not request persistent/global privileges: always is false, and it does not modify other skills or system-wide configuration. It performs a single network request to the user-supplied Karakeep instance when invoked.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install karakeep-save
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /karakeep-save 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
Initial release - save bookmarks to self-hosted Karakeep instance
元数据
Slug karakeep-save
版本 1.0.0
许可证
累计安装 0
当前安装数 0
历史版本数 1
常见问题

Karakeep Save 是什么?

Save bookmarks to Karakeep (self-hosted bookmark manager). Use when the user wants to save a URL, bookmark a link, or add something to their reading list. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 1546 次。

如何安装 Karakeep Save?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install karakeep-save」即可一键安装,无需额外配置。

Karakeep Save 是免费的吗?

是的,Karakeep Save 完全免费(开源免费),可自由下载、安装和使用。

Karakeep Save 支持哪些平台?

Karakeep Save 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Karakeep Save?

由 nickian(@nickian)开发并维护,当前版本 v1.0.0。

💬 留言讨论