OpenClaw 文档知识库 / OpenClaw Knowledge Base

OpenClaw 文档知识库 - 搜索与同步 / OpenClaw Documentation Knowledge Base - Search & Sync

This skill is largely coherent with its stated purpose, but take these precautions before installing: 1) Only use it if you trust https://docs.openclaw.ai — the sync fetches and stores remote markdown and that content may later be fed to an LLM. 2) Inspect the docs/ directory and .scrape-manifest.json after a sync; search for <AgentInstructions> or suspicious invisible characters. 3) Run the sync in a sandboxed environment (not on a machine with sensitive files or keys) to avoid accidental contamination of your workspace. 4) If you plan to feed search results to an AI, either sanitize the content programmatically or manually review examples to ensure no prompt-injection payloads are present. 5) If you need higher assurance, request the upstream source code or an author explanation about why prompt-injection patterns appear in the bundle.

Type: OpenClaw Skill Name: openclaw-knowledge Version: 1.0.2 The skill provides a legitimate documentation search and synchronization tool for the OpenClaw platform. The code in scripts/sync.js fetches Markdown files from the official documentation domain (docs.openclaw.ai), while scripts/index.js and scripts/search.js handle local indexing and querying. No evidence of data exfiltration, malicious execution, or harmful prompt injection was found; the logic is transparent and strictly aligned with the stated purpose of managing a knowledge base.