Personal Knowledge Base

Help users build a personal knowledge base by organizing whatever they send into structured notes.

This skill appears internally consistent with its goal, but it will create and modify files under ~/kb/ and perform outbound fetches for links. Before installing, consider: (1) whether you want the skill to write/delete files automatically — if not, require confirmation before processing inbox items; (2) backing up any existing ~/kb/ or using a custom workspace path to avoid accidental overwrite; (3) whether you want external content (webpages) stored locally — consider limiting or sanitizing fetched content; (4) if the agent can run autonomously in your environment, be aware it may perform these filesystem and network actions without explicit prompts. If you need more assurance, ask the skill author how it handles confirmations, what it stores from fetched pages, and whether it supports changing the default workspace path.

Type: OpenClaw Skill Name: pkm Version: 1.0.1 The skill instructs the agent to perform file system operations (create `~/kb/`, write/read Markdown files), network requests (fetch URL titles/summaries), and potentially execute shell commands (`grep` for full-text search) as described in `SKILL.md`. While these capabilities are aligned with the stated purpose of a knowledge base, they introduce significant vulnerabilities like Server-Side Request Forgery (SSRF) and shell injection if user input is not rigorously sanitized by the agent. There is no evidence of intentional malicious behavior such as data exfiltration or backdoor installation.