Siyuan Note

思源笔记（SiYuan Note）本地 API 操作助手。用于读写笔记本、文档、块、搜索、模板、SQL 查询等本地笔记操作。触发场景：用户提到"思源笔记"、"SiYuan"、"帮我创建文档"、"搜索笔记"、"查询数据库"等。

This skill appears to be a legitimate SiYuan local-API helper, but consider the following before installing: (1) it expects and will use an API token (SIYUAN_TOKEN) even though the metadata doesn't declare it — treat that token as sensitive and confirm you want the skill/agent to have it; (2) the skill permits running arbitrary SQL against your local notes database (read and write) — review and restrict that capability if you don't want broad access or accidental data modification; (3) inspect the included scripts yourself (scripts/siyuan.py) to confirm behavior meets your expectations; and (4) if you proceed, prefer providing the token only when necessary, or require an explicit credential declaration/approval to reduce accidental token exposure.

Type: OpenClaw Skill Name: siyuan-note Version: 1.0.0 The skill provides a comprehensive interface for interacting with the local SiYuan Note API, including document management and raw SQL queries. It is classified as suspicious due to significant SQL injection vulnerabilities in `scripts/siyuan.py` and `SKILL.md`, where user-supplied input is directly interpolated into SQL strings (e.g., in the `search` and `search_titles` functions). Additionally, the skill exposes high-risk capabilities such as file deletion and a network forward proxy feature documented in `references/api.md`, which could be exploited if the agent is subjected to prompt injection.