← 返回 Skills 市场
Noverload - Knowledge Memory
作者
drewautomates
· GitHub ↗
· v1.0.0
1912
总下载
1
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install noverload
功能描述
Give your agent a searchable knowledge brain - semantic search, topic synthesis, and action tracking across your saved YouTube videos, articles, Reddit threads, X posts, and PDFs
安全使用建议
This skill appears to do what it says (connect your OpenClaw agent to your Noverload account), but there are a few things to check before installing:
- The SKILL.md requires a NOVERLOAD_TOKEN but the registry metadata doesn't list it — expect to provide that token in ~/.openclaw/openclaw.json or as an env var. Confirm token scope and be prepared to revoke it if needed.
- The skill runs `npx -y noverload-mcp@latest` at runtime, which downloads and executes the latest package from npm. That is convenient but runs remote code without a pinned version. If you care about supply-chain risk, ask the publisher to pin a specific version or provide a vetted package, or inspect the noverload-mcp package source before allowing the skill to run.
- By default the skill is read-only; only enable readOnly:false if you trust the agent's automated actions (it will be able to save URLs, add tags, and mark tasks in your Noverload account).
- Confirm the privacy claims with the vendor (where data is processed and what metadata is sent). If you want extra caution, create a limited-scope token or test with a sandbox account first.
Given the metadata omission and the runtime fetch-and-execute behavior, proceed only after verifying the token requirement and the npm package/version you will allow the agent to run.
功能分析
Type: OpenClaw Skill
Name: noverload
Version: 1.0.0
The skill is classified as benign. It clearly defines its purpose as a knowledge management tool integrating with the Noverload service. The `SKILL.md` file explicitly details the execution of `npx -y noverload-mcp@latest` to run the Model Context Protocol (MCP) server, which is a standard method for distributing Node.js CLI tools. Crucially, the skill is configured for `readOnly: true` by default, enhancing security by preventing the agent from modifying user data without explicit user configuration. The documentation also includes clear privacy and security statements, and there are no signs of prompt injection attempts or instructions for malicious behavior within the provided files. The external dependency on `noverload-mcp` introduces a general supply chain risk, but the skill definition itself does not exhibit malicious intent.
能力评估
Purpose & Capability
The skill name/description (personal knowledge memory, search, summaries) aligns with what the SKILL.md describes. The token-based access to a user's Noverload account is appropriate for this purpose. However, the registry metadata declares no required env vars or primary credential even though SKILL.md clearly requires an NOVERLOAD_TOKEN; that mismatch should be corrected.
Instruction Scope
SKILL.md instructs the agent to spawn an MCP helper via `npx -y noverload-mcp@latest` and to provide NOVERLOAD_TOKEN (via config). The instructions stay within the stated purpose (searching/saving your saved content), but they also describe optional write capabilities (readOnly: false) that allow the agent to save URLs, add tags, and complete action items in your external account — those are powerful actions and the user must explicitly enable them. The instructions do not ask the agent to read unrelated system files, but they do require placing a token in ~/.openclaw/openclaw.json or an env var.
Install Mechanism
There is no packaged install spec in the registry, but the skill's runtime instructs the agent to run `npx -y noverload-mcp@latest`. That will fetch and execute code from the public npm registry at runtime. Using `@latest` and `-y` means the agent will run the most recent package without an explicit pinned version or local review — this is moderate risk because arbitrary code will be downloaded and executed on demand. Prefer a pinned, reviewed release or an explicit install path.
Credentials
The skill needs a personal access token (NOVERLOAD_TOKEN) to access the user's Noverload account, which is proportionate to the described capability. But the skill metadata did not declare this required env var or a primary credential — that's an inconsistency. Also note that turning off read-only mode gives the agent write permissions to your external account, which is justified by the feature but should be enabled deliberately and with least privilege.
Persistence & Privilege
The skill is not always-enabled (always: false) and can be invoked by the user or autonomously by the agent (normal). It does not request persistent modifications to other skills or system-wide settings. The only notable privilege is the optional ability to let the agent write to your Noverload account (via readOnly:false) — that is a feature, not a hidden escalation, but it should be enabled knowingly.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install noverload - 安装完成后，直接呼叫该 Skill 的名称或使用
/noverload触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
Noverload 1.0.0 - Initial release for OpenClaw
- Adds semantic search, synthesis, and action tracking across saved YouTube videos, articles, Reddit threads, X posts, and PDFs.
- Enables AI-powered summaries, topic synthesis, framework extraction, and action item tracking from your knowledge library.
- Supports secure, read-only integration by default; option to allow saving/tagging new content.
- Fully documented command set for searching, synthesizing, extracting, tracking, and saving content.
- Compatible with OpenClaw using a personal access token for authentication.
- Free, Pro, and Trial plans supported; MCP/API features require Pro or Trial.
元数据
常见问题
Noverload - Knowledge Memory 是什么？
Give your agent a searchable knowledge brain - semantic search, topic synthesis, and action tracking across your saved YouTube videos, articles, Reddit threads, X posts, and PDFs. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 1912 次。
如何安装 Noverload - Knowledge Memory？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install noverload」即可一键安装，无需额外配置。
Noverload - Knowledge Memory 是免费的吗？
是的，Noverload - Knowledge Memory 完全免费（开源免费），可自由下载、安装和使用。
Noverload - Knowledge Memory 支持哪些平台？
Noverload - Knowledge Memory 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Noverload - Knowledge Memory？
由 drewautomates（@drewautomates）开发并维护，当前版本 v1.0.0。
推荐 Skills