← 返回 Skills 市场
395
总下载
0
收藏
0
当前安装
10
版本数
在 OpenClaw 中安装
/install wolai-api-skill
功能描述
Wolai API skill — 操作 wolai 笔记（块/页面/数据库）/ Wolai API Skill - Operate wolai notes (blocks, pages, database) via REST API
安全使用建议
This skill appears to implement Wolai API calls and needs a Wolai App Token (WOLAI_TOKEN). Before installing: (1) verify how you'll provide the token — prefer setting WOLAI_TOKEN in a secure config/environment rather than pasting the permanent token into chat; (2) restrict the Wolai app permissions to the minimum required and be ready to revoke/reset the token if needed; (3) note the SKILL.md is Windows PowerShell–oriented (writes to D:\ and uses Windows APIs) so it may not work on non-Windows agents; (4) metadata/version mismatches (SKILL.md version, _meta.json, registry version) look sloppy — consider asking the publisher to clarify and provide a consistent manifest; (5) if you cannot confirm secure handling of tokens by the agent platform, do not provide a long-lived token. If these issues are acceptable and you can supply the token securely, the skill's behavior otherwise aligns with its stated purpose.
功能分析
Type: OpenClaw Skill
Name: wolai-api-skill
Version: 1.0.7
The skill provides a legitimate PowerShell-based interface for interacting with the Wolai note-taking platform's REST API (openapi.wolai.com). The code in SKILL.md includes standard API interaction patterns, proper UTF-8 encoding handling for Chinese characters, and rate-limiting logic, with no evidence of malicious intent, data exfiltration, or prompt injection.
能力评估
Purpose & Capability
The skill claims to operate Wolai notes via the Wolai Open API and the SKILL.md requires a WOLAI_TOKEN — this is appropriate for the stated purpose. However, the registry metadata earlier reported no required env vars/primary credential while the SKILL.md declares WOLAI_TOKEN required; that metadata mismatch is inconsistent.
Instruction Scope
SKILL.md contains concrete PowerShell code that calls only the Wolai API endpoint (https://openapi.wolai.com) which is in-scope. Concerns: (1) setup text ambiguously tells users to 'tell the token to the AI assistant' while the pre-check expects WOLAI_TOKEN in the environment — this could encourage pasting a permanent token into chat history; (2) examples write to a fixed Windows path (D:\output.json) and the runtime is Windows PowerShell, but the skill has no OS restriction — instructions are Windows-specific and may not work elsewhere; (3) the skill performs filesystem writes (examples) and requires the ability to read env vars, which are reasonable for the task but should be noted.
Install Mechanism
No install spec and no code files beyond SKILL.md/_meta.json — instruction-only skill; lowest install risk because nothing is downloaded or executed at install time.
Credentials
SKILL.md requires a single permanent app token (WOLAI_TOKEN), which is proportionate for API access. But the registry metadata contradicts this (says no required env vars/primary credential). The SKILL.md also instructs users in a way that could lead to pasting a long-lived token into chat — risky. The skill does not request unrelated credentials.
Persistence & Privilege
always is false and model invocation is allowed (defaults). The skill does not request elevated or persistent platform privileges. No evidence it modifies other skills or system-wide settings.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install wolai-api-skill - 安装完成后，直接呼叫该 Skill 的名称或使用
/wolai-api-skill触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.7
wolai-api-skill 1.0.7
- No file changes detected in this release.
- All functionality, documentation, and configuration remain unchanged from the previous version.
v1.0.6
wolai-api-skill 1.0.6
- Updated skill description for bilingual clarity (Chinese and English).
- Added explicit skill version to metadata.
- Removed unused or deprecated fields (e.g., allowed-tools, disable).
- No changes to functional logic; documentation and metadata improvements only.
v1.0.5
wolai-api-skill 1.0.5
- Updated skill metadata: added "source" field with GitHub repository URL.
- Standardized credentials format in the configuration. No functional or behavioral changes to skill logic.
v1.0.4
Remove all token persistence examples and storage advice from SKILL.md; only declare credentials in frontmatter
v1.0.3
Add runtime/credentials in SKILL.md frontmatter metadata; remove explicit token persistence instructions
v1.0.2
Fix ClawHub security warnings: add runtime/credentials declarations in _meta.json, add Token security notice in SKILL.md
v1.1.1
wolai-api-skill 1.1.1
- 新增 Invoke-WolaiApi 的 RawJson 参数，支持直接返回原始 JSON，解决 PowerShell 控制台下中文乱码问题。
- 文档补充了应对中文乱码的两种推荐方式（JSON原始输出写入文件、对象属性访问）。
- 其余功能和接口保持不变。
v1.1.0
wolai-api-skill 1.1.0
- Added _meta.json file for enhanced metadata management.
- Expanded documentation to include more block types and detailed API parameter usage.
- Added instructions and examples for paginated traversal of blocks and richer content creation.
- Improved API usage guidance, including error handling and rate limit tips.
v1.0.1
- Removed the file references/api.md from the repository.
- Documentation still refers to references/api.md for detailed API parameters, though the file no longer exists.
- Minor text update: in the Setup section, "应用权限" flow updated from "页面协作 → 应用权限" to "成员协作→应用权限".
v1.0.0
wolai-skill 1.0.0
- 首发版本，实现通过 wolai Open API 操作 wolai 笔记，包括页面、块和数据库。
- 支持读取页面/块内容、创建块、获取与插入数据库、Token 获取与刷新等主要能力。
- 提供 PowerShell 示例脚本和常见工作流说明，便于快速集成与使用。
- 文档涵盖接口决策表、速查错误码、接口限制及常见问题。
元数据
常见问题
Wolai API 技能 是什么？
Wolai API skill — 操作 wolai 笔记（块/页面/数据库）/ Wolai API Skill - Operate wolai notes (blocks, pages, database) via REST API. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 395 次。
如何安装 Wolai API 技能？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install wolai-api-skill」即可一键安装，无需额外配置。
Wolai API 技能 是免费的吗？
是的，Wolai API 技能 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Wolai API 技能 支持哪些平台？
Wolai API 技能 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Wolai API 技能？
由 花渡（@cizixiu）开发并维护，当前版本 v1.0.7。
推荐 Skills