← 返回 Skills 市场
fgbytes

Library

作者 fgbytes · GitHub ↗ · v1.0.1
cross-platform ⚠ suspicious
1797
总下载
3
收藏
1
当前安装
2
版本数
在 OpenClaw 中安装
/install sansfiction-library
功能描述
Authorized SansFiction library manager. Adds books to your library, updates reading status, logs progress, and can schedule a daily “how much did you read today?” check-in. Requires a SansFiction personal token (read/write).
安全使用建议
This skill appears to implement the described SansFiction functionality, but do not paste your personal token into chat unless you understand how your platform treats chat history -- that step introduces real risk. Prefer storing the token via a secure platform secret or directly editing ~/.openclaw/openclaw.json yourself rather than sending it in chat. Confirm the skill will not echo the token and that OpenClaw will treat it as a hidden secret. Ask the publisher (or verify on the SansFiction docs) why the skill hard-codes Europe/Warsaw as the default cron timezone and why the OpenClaw CLI is used without being listed as a required binary. Only install if you trust the skill source and are comfortable with an agent that can schedule recurring reminders using your token.
功能分析
Type: OpenClaw Skill Name: sansfiction-library Version: 1.0.1 The skill is designed for managing a SansFiction library and scheduling reading reminders. It uses `curl` to interact with the `https://sansfiction.com/api/mcp` endpoint, authenticating with a `SANSFICTION_TOKEN`. The `skill.md` provides detailed instructions for the AI agent on how to handle user requests, manage the token securely (explicitly stating not to echo it), and schedule a daily reminder using OpenClaw's internal cron mechanism. All actions and instructions are aligned with the stated purpose, and there is no evidence of malicious intent, data exfiltration, unauthorized execution, or harmful prompt injection.
能力评估
Purpose & Capability
The skill's name/description (SansFiction library manager) aligns with using a SansFiction personal token and calling the service's MCP endpoint. However, the runtime instructions assume use of the OpenClaw CLI (openclaw cron add) without listing that CLI as a required binary — a minor coherence gap. Overall capabilities requested are plausible for the described feature set.
Instruction Scope
The SKILL.md instructs the agent to have the user paste the SANSFICTION_TOKEN 'once' into chat and then persist it into ~/.openclaw/openclaw.json or env vars. This is contradictory and risky: asking the user to paste a secret into chat exposes it to chat logs and platform storage. The document also contains a hard rule 'Never echo the token back or write it into chat logs' which conflicts with the 'paste in this chat' step — the conflict is a practical security concern because the platform may retain chat history. Apart from that, the instructions otherwise stay within the library management scope (search/add/status/log/stats) and call only the documented SansFiction MCP endpoint.
Install Mechanism
This is an instruction-only skill with no install spec and no code files, which minimizes install-time risk. It requires the 'curl' binary (declared). No remote downloads or extracted archives are present.
Credentials
The skill uses a single primary credential (SANSFICTION_TOKEN), which is appropriate for an API-based library manager. That token is justified by the described read/write operations. Caveat: the SKILL.md's suggested token handling (paste into chat then persist to ~/.openclaw/openclaw.json) increases exposure risk compared with using a secure secret store; also the metadata lists curl as a required binary but the instructions rely on the OpenClaw CLI for cron scheduling without declaring it.
Persistence & Privilege
The skill is not marked always:true (good). It can be invoked autonomously (disable-model-invocation:false), which is the platform default; combined with the ability to schedule a cron job, the skill can cause recurring agent actions (daily check-in). This is reasonable for a reminder feature but increases the impact if the skill were misused, so be cautious about granting it persistent token access.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install sansfiction-library
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /sansfiction-library 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.1
No changes detected in this version.
v1.0.0
Initial release of SansFiction Library manager skill: - Add or remove books from your SansFiction library and manage reading status. - Log reading progress with support for pages and minutes. - List current books being read and view personal reading stats. - Schedule a daily “how much did you read today?” check-in (with OpenClaw cron support). - Requires a SansFiction personal token for authorization; no passwords are handled or stored. - Clear setup, confirmation prompts for ambiguous cases, and strict token privacy.
元数据
Slug sansfiction-library
版本 1.0.1
许可证
累计安装 1
当前安装数 1
历史版本数 2
常见问题

Library 是什么?

Authorized SansFiction library manager. Adds books to your library, updates reading status, logs progress, and can schedule a daily “how much did you read today?” check-in. Requires a SansFiction personal token (read/write). 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 1797 次。

如何安装 Library?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install sansfiction-library」即可一键安装,无需额外配置。

Library 是免费的吗?

是的,Library 完全免费(开源免费),可自由下载、安装和使用。

Library 支持哪些平台?

Library 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Library?

由 fgbytes(@fgbytes)开发并维护,当前版本 v1.0.1。

💬 留言讨论