← 返回 Skills 市场
jacobluo

Mowenskill Publish

作者 jacobluo · GitHub ↗ · v1.0.2 · MIT-0
cross-platform ⚠ suspicious
100
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install mowenskill-publish
功能描述
Publish, edit, or configure notes on Mowen (墨问) via Open API. Use when user mentions 墨问, mowen, 发布笔记, publish note, or wants to create social-media-style not...
安全使用建议
This skill appears to implement an honest Mowen note publisher, but there are a few red flags you should address before installing or using it with real credentials: 1) The SKILL.md and scripts require MOWEN_API_KEY, but the skill metadata does not declare this — treat that as a transparency/packaging bug. 2) The script will read local image files if you give local paths (intended behavior), so only supply files you want uploaded. 3) run_tests.sh contains a hard-coded absolute path (likely leftover from the author) — benign but sloppy. Recommended actions: review scripts/publish_note.py yourself, verify the BASE_URL (https://open.mowen.cn) and endpoints, only provide an API key you control (and revoke it if unsure), run the included tests locally in a safe environment, and ask the publisher to update metadata to declare MOWEN_API_KEY and remove hard-coded paths before trusting the skill in production.
功能分析
Type: OpenClaw Skill Name: mowenskill-publish Version: 1.0.2 The skill bundle is a legitimate tool for publishing and managing notes on the Mowen (墨问) platform via its Open API. The core logic in `scripts/publish_note.py` is well-implemented using standard Python libraries, featuring proper error handling, rate-limiting, and support for both local and remote image uploads as described in the documentation. While `run_tests.sh` contains a hardcoded local development path (/Users/robiluo/...), this is a common non-malicious artifact of the development process. The skill's behavior is fully aligned with its stated purpose, and no evidence of data exfiltration, malicious execution, or prompt injection was found.
能力评估
Purpose & Capability
The name/description (publish notes on Mowen) align with the included scripts and reference documentation: the Python script implements create/edit/settings and image upload against open.mowen.cn. However, the package metadata lists no required environment variables or primary credential while the SKILL.md and scripts clearly require MOWEN_API_KEY — an inconsistency between declared requirements and actual capability.
Instruction Scope
SKILL.md instructs the agent to collect note content and run scripts that only call the Mowen Open API and upload endpoints; it does not instruct reading unrelated system files or exfiltrating data. It does rely on the user (or agent) supplying local image file paths which the script will read when performing uploads — this is expected for an uploader but worth noting.
Install Mechanism
There is no install spec (instruction-only skill with code files included). No remote downloads or package installs are performed by the skill metadata; the Python script uses only the standard library. This is low install risk.
Credentials
The script requires an API credential (MOWEN_API_KEY) to operate but the skill metadata declares no required environment variables or primary credential — this is a meaningful mismatch. The script will use that API key to contact open.mowen.cn and to obtain OSS upload forms (which then point to third-party endpoints returned by the API). The script will also read local files when given local image paths; ensure you only provide files you intend to upload. The missing declared env var reduces transparency about what secrets this skill needs.
Persistence & Privilege
The skill does not request always:true and has no install behavior that modifies other skills or global agent settings. It does not request persistent system-wide privileges.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install mowenskill-publish
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /mowenskill-publish 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.2
Remove README.md and CLAUDE.md from published package
元数据
Slug mowenskill-publish
版本 1.0.2
许可证 MIT-0
累计安装 0
当前安装数 0
历史版本数 1
常见问题

Mowenskill Publish 是什么?

Publish, edit, or configure notes on Mowen (墨问) via Open API. Use when user mentions 墨问, mowen, 发布笔记, publish note, or wants to create social-media-style not... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 100 次。

如何安装 Mowenskill Publish?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install mowenskill-publish」即可一键安装,无需额外配置。

Mowenskill Publish 是免费的吗?

是的,Mowenskill Publish 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

Mowenskill Publish 支持哪些平台?

Mowenskill Publish 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Mowenskill Publish?

由 jacobluo(@jacobluo)开发并维护,当前版本 v1.0.2。

💬 留言讨论