Siyuan Notes Skill

思源笔记工具——搜索、阅读、编辑、组织用户的笔记。Use when user says: 搜索笔记、查找文档、打开文档、阅读笔记、编辑笔记、创建文档、修改块、思源笔记、SiYuan、整理文档、管理标签、Daily Note、反向链接、最近修改、PMF补丁、SQL查询blocks。不要用于与思源笔记无关的通用编程或...

This skill appears to implement a legitimate SiYuan notes CLI, but there are a few red flags you should check before installing or enabling write-capability: - Expectation vs declaration: The skill requires SIYUAN_SERVER and SIYUAN_TOKEN (and an environment flag SIYUAN_ENABLE_WRITE to allow edits), but the registry metadata did not declare any required environment variables or primary credential. Treat that as a metadata omission — confirm you must provide these values before use. - Sensitive credentials: Only provide SIYUAN_TOKEN to this skill if you trust the code and the agent runtime. With that token the skill can read and (if you enable writes) modify your SiYuan content. Keep SIYUAN_ENABLE_WRITE=false unless you intentionally want to allow edits. - Disk persistence: The tool records 'read' marks and caches state on disk. Ask or inspect index.js to learn where that cache is stored if you care about local persistence or multi-user environments. - Arbitrary queries and exports: The JS API exposes executeSiyuanQuery and apply-patch/PMF flows. Those are useful for advanced tasks but also allow wide read access (SQL) and bulk edits. Do not run this skill against an untrusted or remote SiYuan instance without reviewing the code and limiting network exposure. - What to do next: review the index.js and any network-related code to confirm there are no unexpected external endpoints; confirm where cached/read-mark files are written; only set SIYUAN_ENABLE_WRITE=true in trusted contexts; and ideally ask the skill author to update registry metadata to declare required env vars (SIYUAN_SERVER, SIYUAN_TOKEN, SIYUAN_ENABLE_WRITE) and document cache paths. If you cannot review the code, treat it as read-only by leaving SIYUAN_ENABLE_WRITE unset/false and avoid running SQL queries that might exfiltrate data.

Type: OpenClaw Skill Name: siyuan-notes-skill Version: 0.1.0 The bundle is a comprehensive and well-documented tool for interacting with the SiYuan Notes API. It provides extensive functionality for searching, reading, and editing notes, including a sophisticated 'Write Safety Protocol' that uses optimistic locking (version checks) to prevent data loss, managed via a local cache file (`.siyuan-read-guard-cache.json`). While it possesses high-risk capabilities such as executing SQL queries against the SiYuan database and performing version checks via GitHub (`api.github.com`), these behaviors are transparently documented and strictly aligned with the stated purpose. No evidence of malicious intent, data exfiltration, or harmful prompt injection was found.