← 返回 Skills 市场
90
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install neodb
功能描述
NeoDB 书影音标注助手 — 通过 API 替代网页/客户端完成所有 NeoDB 操作。支持搜索条目、标记（想看/在看/看过/放弃）、评分、短评、长评、笔记、收藏单、标签管理。触发场景：(1) 用户提到 NeoDB、书影音、标记、想看、看过、在读、读完、评分、评论 (2) 用户要搜索/标注书籍、电影、剧集、音乐...
安全使用建议
This skill appears to do what it says (call NeoDB APIs), but be cautious: SKILL.md requires an OAuth token (NEODB_TOKEN) and optional NEODB_INSTANCE while the registry metadata does not declare those credentials — an omission that reduces transparency. The included scripts/setup-auth.sh will (1) register an OAuth app on the chosen NeoDB instance, (2) open a browser for you to authorize, and (3) save client_id, client_secret, and the access_token to scripts/.credentials.json and print the token. Before installing or running it:
- Review scripts/setup-auth.sh closely (it only talks to your chosen NeoDB instance, but it stores secrets locally).
- Do not run the script if you don't trust the instance you select. Prefer specifying the official/neodb.social instance if that's your intent.
- Consider creating an OAuth token manually in the instance UI and exporting it to your environment instead of running the script.
- If you run the script, move or protect scripts/.credentials.json and add it to .gitignore (the script already suggests this).
- Ask the skill author/registry to update the metadata to list NEODB_TOKEN (primaryEnv) and NEODB_INSTANCE so required permissions are explicit.
If you need a safer test: run the script in an isolated environment (VM/container) and avoid committing any credential files.
功能分析
Type: OpenClaw Skill
Name: neodb
Version: 1.0.0
The NeoDB skill bundle is a legitimate tool for managing media logs (books, movies, music) via the NeoDB API. It includes a standard OAuth authentication script (scripts/setup-auth.sh) that handles token generation locally and provides clear instructions for the AI agent, including a mandatory requirement to confirm all write operations with the user. No evidence of data exfiltration, malicious execution, or harmful prompt injection was found.
能力评估
Purpose & Capability
The skill claims to operate NeoDB via its API, which legitimately requires an OAuth token and (optionally) an instance hostname. The SKILL.md explicitly requires NEODB_TOKEN and NEODB_INSTANCE, but the registry metadata declares no required environment variables or primary credential — that inconsistency is unexpected and reduces transparency.
Instruction Scope
SKILL.md provides concrete curl templates and clearly limits operations to NeoDB API endpoints. It instructs storing NEODB_TOKEN (in ~/.claude/settings.json env) and to run the provided scripts/setup-auth.sh. The instructions promise user confirmation before write operations. No instructions request unrelated files, other service credentials, or exfiltration to unexpected endpoints.
Install Mechanism
There is no install spec (instruction-only skill). The only code file is a local bash auth helper; there are no downloads, package installs, or archive extraction steps. This is a low-risk install surface.
Credentials
The SKILL.md legitimately requires NEODB_TOKEN (OAuth access token) and optionally NEODB_INSTANCE. Those are proportional to the stated purpose. However the registry metadata does not declare these required env vars or a primaryEnv, which is an inconsistency. The included script also produces and stores client_id/client_secret and access_token locally — these are sensitive and should be explicitly declared and documented in metadata.
Persistence & Privilege
The setup script writes credentials to a local file (scripts/.credentials.json) and prints the access token; it also advises adding the token to ~/.claude/settings.json. The skill is not marked always:true and does not modify other skills, but local persistence of client_secret and access_token is a real sensitivity (risk of accidental commit or exposure) and should be considered before use.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install neodb - 安装完成后，直接呼叫该 Skill 的名称或使用
/neodb触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
Initial release: search, mark, rate, review books, movies, music, games on NeoDB via API
元数据
常见问题
NeoDB 是什么？
NeoDB 书影音标注助手 — 通过 API 替代网页/客户端完成所有 NeoDB 操作。支持搜索条目、标记（想看/在看/看过/放弃）、评分、短评、长评、笔记、收藏单、标签管理。触发场景：(1) 用户提到 NeoDB、书影音、标记、想看、看过、在读、读完、评分、评论 (2) 用户要搜索/标注书籍、电影、剧集、音乐... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 90 次。
如何安装 NeoDB？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install neodb」即可一键安装，无需额外配置。
NeoDB 是免费的吗？
是的，NeoDB 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
NeoDB 支持哪些平台？
NeoDB 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 NeoDB？
由 Eric Yu（@gitnapp）开发并维护，当前版本 v1.0.0。
推荐 Skills