← 返回 Skills 市场
No Cap
作者
zephyr2800
· GitHub ↗
· v1.0.0
· MIT-0
97
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install no-cap
功能描述
Automatically ingest X/Twitter bookmarks, filter noise, and extract actionable signals. Run to process new bookmarks into structured intelligence.
安全使用建议
Do not follow the cookie-extraction steps or paste your auth_token/ct0 into anything until you have the actual source code and installation instructions. This published skill contains only runtime instructions but no code or install package — commands like `npx tsx src/cli.ts` reference files that are not included. Ask the publisher for the repository URL or a vetted release, review the code yourself (or have a trusted party review it), and prefer an OAuth/API-based integration rather than handing over browser session cookies. If you temporarily provide session cookies to any third-party tool, plan to revoke or rotate them immediately afterward. Finally, verify any tool requiring Node/npx/tsx on your system and avoid running unreviewed scripts as admin.
功能分析
Type: OpenClaw Skill
Name: no-cap
Version: 1.0.0
The skill performs high-risk credential extraction and management. Specifically, SKILL.md instructs the agent to execute a CLI command (auto-login) that extracts X/Twitter session cookies from the Chrome browser and requires macOS Keychain access. It also handles sensitive data including session tokens and Resend API keys, storing them in ~/.no-cap/config.json. While these capabilities are plausibly required for the stated purpose of automating bookmark ingestion and email digests, the automated extraction of browser credentials and interaction with the system keychain represent significant security risks.
能力评估
Purpose & Capability
The skill's stated purpose (ingest X/Twitter bookmarks) is plausible, but the runtime steps assume a local repository with a TypeScript CLI (src/cli.ts) and use of npx/tsx. The published skill contains no code files, no repo, and declares no required binaries (node/npx). That mismatch means the skill cannot operate as described from the provided bundle alone.
Instruction Scope
Runtime instructions explicitly direct extraction of X session cookies from Chrome (auto-login) or manual copying of auth_token and ct0, reading and writing ~/.no-cap/config.json, and running CLI commands. Extracting browser session cookies and storing them locally is highly sensitive; the instructions do not provide secure handling or explain where/how code will run (there is no included code).
Install Mechanism
There is no install specification and no code files, yet the instructions expect you to run npx tsx against a local repoPath. The skill neither supplies the referenced repository nor declares Node/npx as required binaries. This is an incoherent install/runtime model — you would need to obtain code from elsewhere, which is not provided or verified here.
Credentials
The workflow requests sensitive credentials (X session cookies: auth_token and ct0) and optionally a Resend API key for email delivery. While these secrets are relevant to the skill's function, the bundle does not declare where they will be stored beyond a local config file, does not include code to inspect for leaks, and asks you to extract browser cookies — a high-risk operation if the code performing the extraction is not available for review.
Persistence & Privilege
The skill does not set always:true and does not claim system-wide privileges, but it instructs writing credentials to ~/.no-cap/config.json and setting permissions to 600. Storing session cookies locally is persistent and increases blast radius if the code is malicious; the behavior itself is explainable for this use case but should only be done after reviewing the implementation that will read those files.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install no-cap - 安装完成后，直接呼叫该 Skill 的名称或使用
/no-cap触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
Initial release: X bookmark ingestion, 3-layer noise filter, email digest
元数据
常见问题
No Cap 是什么？
Automatically ingest X/Twitter bookmarks, filter noise, and extract actionable signals. Run to process new bookmarks into structured intelligence. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 97 次。
如何安装 No Cap？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install no-cap」即可一键安装，无需额外配置。
No Cap 是免费的吗？
是的，No Cap 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
No Cap 支持哪些平台？
No Cap 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 No Cap？
由 zephyr2800（@zephyr2800）开发并维护，当前版本 v1.0.0。
推荐 Skills