← 返回 Skills 市场
MH bear-notes
作者
mohdalhashemi98-hue
· GitHub ↗
· v1.0.0
472
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install mh-bear-notes
功能描述
Create, search, and manage Bear notes via grizzly CLI.
安全使用建议
This skill appears coherent, but take these precautions before installing:
- Review the grizzly GitHub repo and consider pinning the module to a specific release rather than '@latest' to avoid unexpected upstream changes.
- The Bear API token (~/.config/grizzly/token) is sensitive: create it only from the Bear app UI, store it with restrictive file permissions, and do not expose it to remote endpoints.
- Be cautious with GRIZZLY_CALLBACK_URL: the callback mechanism is needed to read note contents, but if you configure the callback URL to a remote host it could transmit note data off your machine. Prefer localhost callbacks unless you explicitly need remote delivery.
- Verify the built 'grizzly' binary (audit source or checksum) if you care about supply-chain/trust.
- This skill is macOS-only and requires the Bear app to be installed and running.
If you are comfortable with these trade-offs, the skill's requirements and instructions match its stated purpose.
功能分析
Type: OpenClaw Skill
Name: mh-bear-notes
Version: 1.0.0
The skill bundle is designed to manage Bear notes using the `grizzly` CLI tool. The `SKILL.md` clearly outlines its purpose, installation via `go install github.com/tylerwince/grizzly/cmd/grizzly@latest`, and usage instructions. It requires the user to manually provide a Bear API token for certain operations, which is then used by the `grizzly` tool via a specified file path. There is no evidence of prompt injection against the agent, data exfiltration to external endpoints (callback URLs are localhost), malicious execution, persistence mechanisms, or obfuscation. The skill's behavior is entirely aligned with its stated purpose.
能力评估
Purpose & Capability
Name/description match the requirements: the skill requires the 'grizzly' binary and (optionally) installs it from the grizzly Go module. All declared requirements (macOS/darwin, grizzly binary) are appropriate for managing Bear notes.
Instruction Scope
SKILL.md confines actions to running grizzly commands and storing/reading a Bear API token at ~/.config/grizzly/token. One relevant risk to note: grizzly supports x-callback-style operations that send responses to a callback URL (GRIZZLY_CALLBACK_URL). If that URL is set to a remote endpoint, note contents or IDs could be sent off-host. The guidance in the skill uses a localhost callback by default, which is appropriate; users should avoid setting callback_url to an external host unless they intend remote delivery.
Install Mechanism
Install spec uses 'go' to fetch github.com/tylerwince/grizzly/cmd/grizzly@latest and build a 'grizzly' binary. This is an expected, traceable source on GitHub, but '@latest' is mutable — consider pinning to a specific release/tag or reviewing the repo before building to reduce supply-chain risk.
Credentials
The skill declares no required environment variables and only relies on the Bear API token (stored in ~/.config/grizzly/token) and optional grizzly configuration (GRIZZLY_TOKEN_FILE, GRIZZLY_CALLBACK_URL, etc.). These are proportional to the task; the token is sensitive and should be protected (file permissions, avoid exporting it to remote callback URLs).
Persistence & Privilege
The skill does not request 'always: true' or other elevated persistence. Installing the grizzly binary writes a user-level binary; the skill does not modify other skills or system-wide agent settings. Runtime behavior (callbacks) is controlled by grizzly and user configuration.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install mh-bear-notes - 安装完成后，直接呼叫该 Skill 的名称或使用
/mh-bear-notes触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
Imported from OpenClaw bundled skill
元数据
常见问题
MH bear-notes 是什么？
Create, search, and manage Bear notes via grizzly CLI. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 472 次。
如何安装 MH bear-notes？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install mh-bear-notes」即可一键安装，无需额外配置。
MH bear-notes 是免费的吗？
是的，MH bear-notes 完全免费（开源免费），可自由下载、安装和使用。
MH bear-notes 支持哪些平台？
MH bear-notes 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（darwin）。
谁开发了 MH bear-notes？
由 mohdalhashemi98-hue（@mohdalhashemi98-hue）开发并维护，当前版本 v1.0.0。
推荐 Skills