Readeck Save

Save articles to Readeck (self-hosted read-it-later app). Use when the user wants to save an article for later reading, add something to their reading list, or send a page to Readeck.

The skill's behavior (POSTing a URL to a Readeck instance using a bearer token) is consistent and not inherently malicious, but the package metadata omits things the script actually needs. Before installing or using it: 1) Verify the publisher/source — there is no homepage and the owner is unknown. 2) Expect to set READECK_URL and READECK_API_TOKEN locally; the token will be sent to that URL, so only point it at a trusted Readeck instance. 3) Ensure curl and jq are installed on the host (the script uses them). 4) If you want better transparency, ask the publisher to update registry metadata to declare the required env vars and required binaries or provide an explicit install step. 5) Review the small script (scripts/save.sh) yourself — it is short and easy to audit — and consider running it in a restricted environment if you are unsure.

Type: OpenClaw Skill Name: readeck-save Version: 1.0.0 The skill is classified as benign. It transparently uses `curl` to make a POST request to a user-configured Readeck instance, authenticating with a user-provided API token. The script `scripts/save.sh` explicitly requires and uses `READECK_URL` and `READECK_API_TOKEN` environment variables, which are clearly documented in `SKILL.md`. All actions are directly aligned with the stated purpose of saving articles to a self-hosted read-it-later app, with no evidence of malicious intent, unauthorized data access, or prompt injection attempts against the agent.