shimo-export

石墨文档导出 AI Skill — 通过 AI Agent 与石墨文档 (shimo.im) API 交互， 实现自动登录、文件列表浏览、团队空间扫描、批量导出（支持 Markdown、PDF、Word、Excel、PPT、XMind、图片等格式）。 当用户提到石墨文档、导出文件、下载文档、批量导出、团队空间、文...

What to consider before installing: 1) This skill will ask for your shimo session cookie (shimo_sid). That is required for exporting files — this is expected. But the skill's login script will run a local reverse-proxy (http://localhost:18927), open your browser, intercept the Set-Cookie header, and save the cookie to config/env.json in the skill directory. The cookie will therefore be stored on disk (mode 0600). 2) The SKILL.md contains some inconsistent claims: it says business scripts only read process.env.SHIMO_COOKIE, yet preflight-check and browser-login read/write config/env.json and preflight-check has a --raw mode that prints the cookie. Expect the cookie to be accessible on the host filesystem and potentially to stdout if piping is used. 3) The agent is instructed to automatically run browser-login on credential expiry and to suppress printing intermediate commands or cookie values. If you permit autonomous invocation, the agent may open the local proxy and browser without additional confirmation. If you are uncomfortable with that, disable automatic invocation or require manual approval before running auth scripts. 4) Practical recommendations: - Review the browser-login.cjs and preflight-check.cjs sources (they are included) so you understand exactly what will be proxied, saved, and printed. - Prefer setting SHIMO_COOKIE yourself in your environment (export SHIMO_COOKIE='...') or use a disposable account if you want to test first. - If you allow browser-login, run it in a trusted/isolated environment (not on a machine with high-value credentials) and verify config/env.json permissions after login. - Be cautious with preflight-check --raw: it prints the cookie to stdout and could be captured; avoid pasting cookie values into chat or logs. - If you need stricter control, require the agent to prompt for explicit user confirmation before running browser-login or performing writes to disk. Overall: the skill appears to do what it claims, but the combination of automatic local proxy login, on-disk credential storage, and contradictory documentation about credential handling make it suspicious enough to warrant caution and manual review before use.