← 返回 Skills 市场
239
总下载
1
收藏
0
当前安装
5
版本数
在 OpenClaw 中安装
/install memolecard-zh
功能描述
自动打开MemoleCard官网，输入文章内容，选择卡片样式，全自动拆分生成卡片并返回压缩包下载链接。
安全使用建议
Be cautious before installing or running this skill. The script will access your browser session (document.cookie) and may send those cookies and your User-Agent to a BACKUP_SERVER_URL if the normal download flow fails — that can expose login/session tokens. The skill metadata does not declare required tools (agent-browser, jq, curl) or the backup URL, so ask the author to: (1) explain and justify the backup server and why cookies must be sent there; (2) declare required binaries and any env vars; (3) provide a trusted source/homepage or the full source code for review. If you proceed, only run it in a sandboxed account or environment without sensitive site logins, or avoid supplying a BACKUP_SERVER_URL unless you trust the endpoint.
功能分析
Type: OpenClaw Skill
Name: memolecard-zh
Version: 1.0.4
The skill script in SKILL.md automates article-to-card conversion on moccard.com but includes a high-risk 'backup download' routine. This mechanism extracts the browser's active session cookies (document.cookie) and transmits them via curl to an external IP address provided in the {{ip}} variable. While this is presented as a functional fallback for downloading generated files, the extraction and transmission of session tokens to a remote endpoint is a classic data exfiltration pattern and poses a significant risk of session hijacking.
能力评估
Purpose & Capability
Name/description match the script's actions (open site, fill article, select style, split, download). However the SKILL.md relies on external tools (agent-browser, jq, curl) and a BACKUP_SERVER_URL template though the skill metadata declares no required binaries or environment—this mismatch is unexpected and should be explained by the author.
Instruction Scope
The script instructs the agent to read document.cookie and navigator.userAgent from the site and then send them to a BACKUP_SERVER_URL during fallback download. This can expose session cookies/authentication data to an external server. It also reads/writes local Downloads files and attempts to capture native download links via page injection. Extracting and transmitting cookies to an arbitrary server is outside the minimal scope needed to return a download link and is a high-risk action.
Install Mechanism
There is no install spec (instruction-only), which minimizes direct code-install risk, but the runtime expects command-line tools (agent-browser, jq, curl) that are not declared in the skill metadata. That mismatch means an operator may be unaware these tools are required or that their presence enables the described behaviors.
Credentials
No environment variables or credentials are declared, yet the script uses a BACKUP_SERVER_URL placeholder ({{ip}}) and sends the user's site cookies in requests to that URL. Requiring or using site cookies without declaring or justifying credential use is disproportionate to the stated task and could leak authentication tokens.
Persistence & Privilege
The skill is not force-enabled (always: false), does not request system-level persistence, and only writes to the user's Downloads folder; it does not modify other skills or global agent configuration.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install memolecard-zh - 安装完成后，直接呼叫该 Skill 的名称或使用
/memolecard-zh触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.4
- 更新官网域名，从 memolecard.com 切换为 moccard.com
- SESSION_NAME 变量由 "memolecard-auto" 改为 "moccard-auto"
- 保持其余功能和流程不变，兼容原有用法
v1.0.3
Version 1.0.3 of memolecard-zh
- No file changes detected in this release.
- The functionality and workflow remain unchanged from the previous version.
v1.0.2
- 增加前置参数校验，要求标题≥30字、正文≥600字（富文本）。
- 下载压缩包流程支持三种方式：捕获原生下载、监控本地文件、服务器兜底接口。
- 优化元素定位与样式，提升多语言/变体适配率。
- 新增整体流程超时控制（TIMEOUT_SECONDS）。
- 增强错误提示，兜底失败时输出具体排查建议。
v1.0.1
**优化适配浏览器原生下载行为，提升下载链接获取准确性**
- 自动捕获并返回 MemoleCard 卡片打包下载的原生文件地址或在线链接
- 新增浏览器下载路径指定与本地文件监控，确保压缩包稳定保存与检索
- 增强异常处理提示，下载失败及时反馈
- 完善 Bash 一键执行脚本，支持 ClawHub 场景与自动参数注入
v1.0.0
MemoleCard 自动化技能
适配：ClawHub + Agent Browser功能：打开 → 文章转卡片 → 填内容 → 选样式 → 自动拆分 → 打包下载 → 返回链接
元数据
常见问题
MemoleCard-zh 是什么？
自动打开MemoleCard官网，输入文章内容，选择卡片样式，全自动拆分生成卡片并返回压缩包下载链接。 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 239 次。
如何安装 MemoleCard-zh？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install memolecard-zh」即可一键安装，无需额外配置。
MemoleCard-zh 是免费的吗？
是的，MemoleCard-zh 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
MemoleCard-zh 支持哪些平台？
MemoleCard-zh 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 MemoleCard-zh？
由 MocCard（@moccard）开发并维护，当前版本 v1.0.4。
推荐 Skills