← 返回 Skills 市场
354
总下载
3
收藏
0
当前安装
2
版本数
在 OpenClaw 中安装
/install yandex-cli-yax
功能描述
CLI tool for Yandex Disk, Calendar, and Mail via Yandex OAuth API
安全使用建议
This skill appears to do exactly what it says: a small Node CLI that uses Yandex OAuth and writes a token to ~/.openclaw/yax-token.json. Before installing: (1) confirm you trust the package source (registry metadata lists no homepage while SKILL.md includes a GitHub link), (2) create a Yandex OAuth app and use a dedicated Client ID/secret (don't reuse high-privilege credentials), (3) verify the environment file path (~/.openclaw/yax.env) and token file permissions (they are created with 0600 in code), and (4) be aware mail support is informational only (IMAP/SMTP require network ports that may be blocked). If you need higher assurance, review the full src/yax.cjs contents locally or run the tool in a restricted environment before granting it access to real credentials.
功能分析
Type: OpenClaw Skill
Name: yandex-cli-yax
Version: 1.1.0
The skill is a legitimate CLI tool for managing Yandex Disk and Calendar via official OAuth and CalDAV APIs. It handles sensitive credentials by storing them locally in the user's home directory (~/.openclaw/) with restricted file permissions (0600). The code in src/yax.cjs and the accompanying scripts perform standard API operations without any signs of data exfiltration, malicious execution, or prompt injection.
能力评估
Purpose & Capability
Name/description match the code and instructions: requires node, uses Yandex OAuth endpoints, implements Disk (cloud-api), CalDAV (caldav.yandex.ru), and limited mail notes. Nothing requested (binaries, endpoints) appears unrelated to a Yandex CLI.
Instruction Scope
SKILL.md instructs creating a Yandex OAuth app, storing Client ID/optional secret in ~/.openclaw/yax.env, running an auth flow, and using the CLI commands. Runtime instructions and code only read/write the declared config/token files and call Yandex API endpoints; they do not attempt to access unrelated system paths or exfiltrate data to unknown hosts.
Install Mechanism
No install spec; instruction-only with included node script files. No downloads from arbitrary URLs or extraction of remote archives. Requiring 'node' is proportionate.
Credentials
Declared primaryEnv is YAX_CLIENT_ID (correct). The SKILL.md and code also reference an optional YAX_CLIENT_SECRET saved to ~/.openclaw/yax.env; the secret is optional and not listed as required in metadata—this is plausible but worth noting. The skill writes a token file to ~/.openclaw/yax-token.json (expected for OAuth tokens).
Persistence & Privilege
always:false (no forced inclusion). The skill stores an OAuth token in the user's home directory (normal for CLI tools). It does not modify other skills or system-wide configs.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install yandex-cli-yax - 安装完成后，直接呼叫该 Skill 的名称或使用
/yandex-cli-yax触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.1.0
yax 1.1.0 introduces skill metadata for compatibility and configuration detection.
- Added metadata for OpenClaw integration, including emoji, supported OS, required binaries, environment variables, and config file paths.
- No changes to CLI commands or user-facing features.
v1.0.0
Initial release. CLI tool for Yandex Disk, Calendar, and Mail via OAuth API — supports file operations, CalDAV events, and IMAP/SMTP info.
元数据
常见问题
Yandex 360 CLI (Disk, Calendar, Mail) 是什么？
CLI tool for Yandex Disk, Calendar, and Mail via Yandex OAuth API. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 354 次。
如何安装 Yandex 360 CLI (Disk, Calendar, Mail)？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install yandex-cli-yax」即可一键安装，无需额外配置。
Yandex 360 CLI (Disk, Calendar, Mail) 是免费的吗？
是的，Yandex 360 CLI (Disk, Calendar, Mail) 完全免费（开源免费），可自由下载、安装和使用。
Yandex 360 CLI (Disk, Calendar, Mail) 支持哪些平台？
Yandex 360 CLI (Disk, Calendar, Mail) 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（darwin, linux）。
谁开发了 Yandex 360 CLI (Disk, Calendar, Mail)？
由 Alex（@smvlx）开发并维护，当前版本 v1.1.0。
推荐 Skills