← 返回 Skills 市场
Mubu Integration
作者
liuboacean
· GitHub ↗
· v1.0.0
· MIT-0
66
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install mubu-integration
功能描述
幕布笔记集成,支持登录认证、文档管理、文件夹操作、大纲导出等功能。触发词:幕布、mubu、大纲笔记、思维导图导出、幕布同步
安全使用建议
This skill's code and SKILL.md implement the advertised Mubu operations, but the registry metadata failed to declare that it requires your Mubu phone number and password. If you install it: (1) only provide credentials you are willing to store; consider creating a dedicated or limited account; (2) be aware the script writes an unencrypted token file to ~/.mubu_token — check and restrict its filesystem permissions (chmod 600) or remove it when not needed; (3) confirm you trust the skill source (no homepage or known owner listed); (4) inspect the script yourself or run it in an isolated environment if you want to verify behavior before giving real credentials. If the metadata were corrected to declare required env vars and token persistence, the risk would be lower; as-is, proceed cautiously.
功能分析
Type: OpenClaw Skill
Name: mubu-integration
Version: 1.0.0
The skill is a legitimate integration for the Mubu (mubu.com) outlining service, providing CLI and AI agent capabilities for document and folder management. It handles authentication via environment variables (MUBU_PHONE, MUBU_PASSWORD) and caches session tokens in a local file (~/.mubu_token), which is standard behavior for such tools. All network requests in scripts/mubu_api.py are directed to the official Mubu API (api2.mubu.com), and no evidence of data exfiltration, malicious execution, or prompt injection was found.
能力评估
Purpose & Capability
Name/description promise a Mubu integration (login, doc/folder management, export). The included script implements those features and calls Mubu API endpoints, so capability matches purpose. However, the registry metadata lists no required environment variables or primary credential while the SKILL.md and scripts require MUBU_PHONE and MUBU_PASSWORD; this metadata omission is an incoherence (the skill needs credentials but the manifest doesn't declare them).
Instruction Scope
SKILL.md shows code snippets and usage that only call Mubu API endpoints, which is appropriate. But the runtime behavior in scripts/mubu_api.py reads/writes a token file at ~/.mubu_token and the README suggests an alternative config file ~/.workbuddy/.env.mubu; those filesystem accesses are not declared in registry metadata. The CLI also allows reading arbitrary local files when saving content (e.g., --file), which could cause the agent to read local files if invoked with such arguments. These file reads/writes are within the tool's domain but should be explicit in metadata/instructions.
Install Mechanism
No install spec is present (instruction-only plus a script). That minimizes installer risk — nothing is downloaded or executed automatically beyond the provided Python script. The script uses the requests library but does not install packages itself; the user would need Python and requests available.
Credentials
The skill legitimately needs MUBU_PHONE and MUBU_PASSWORD to log in, which is proportional to the stated functionality. However, the skill metadata did not declare these required environment variables or a primary credential, creating an expectation mismatch. Also the script persists JWT tokens locally in plaintext (~/.mubu_token), which increases the sensitivity of granting those credentials.
Persistence & Privilege
The skill does not request elevated platform privileges and is not 'always: true'. It does persist authentication tokens to ~/.mubu_token (JSON containing token, user id, username, expires_at) unencrypted; this is typical for CLI tools but is a privacy/credential persistence concern the user should be aware of.
如何使用
- 确保已安装 OpenClaw(本地或 Docker 部署)
- 在对话框中输入安装命令:
/install mubu-integration - 安装完成后,直接呼叫该 Skill 的名称或使用
/mubu-integration触发 - 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
Initial release of mubu-integration:
- 支持幕布(mubu.com)账号登录与 Token 管理
- 提供创建、获取、更新、删除文档和文件夹的 API 接口
- 支持思维导图内容(大纲结构)获取与 Markdown 导出
- 涵盖基本的 Token 缓存与自动刷新
- 提供典型操作的 Python 接口实现与使用示例
- 适配幕布用户的主要大纲笔记和导出需求
元数据
常见问题
Mubu Integration 是什么?
幕布笔记集成,支持登录认证、文档管理、文件夹操作、大纲导出等功能。触发词:幕布、mubu、大纲笔记、思维导图导出、幕布同步. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 66 次。
如何安装 Mubu Integration?
在 OpenClaw 或 Claude Code 对话框中运行命令「/install mubu-integration」即可一键安装,无需额外配置。
Mubu Integration 是免费的吗?
是的,Mubu Integration 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。
Mubu Integration 支持哪些平台?
Mubu Integration 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。
谁开发了 Mubu Integration?
由 liuboacean(@liuboacean)开发并维护,当前版本 v1.0.0。
推荐 Skills