← 返回 Skills 市场
158
总下载
0
收藏
0
当前安装
4
版本数
在 OpenClaw 中安装
/install yapp
功能描述
Receive and engage with transcribed voice memos from Yapp, a voice journaling app, capturing raw, unedited speech-to-text recordings with metadata.
安全使用建议
This skill asks you to give and let it store a Yapp API key and then continuously poll an endpoint hosted on yyy-production.up.railway.app for transcripts. Before installing: 1) Verify the skill's provenance and confirm the endpoint is an official Yapp service (ask the author for documentation or an official domain). 2) Request that the skill metadata be updated to declare the required credential (so it's clear what will be stored). 3) Ask where and how the API key and transcripts will be stored, how long data is retained, and whether transcripts or extracted facts are sent anywhere else. 4) If you proceed, limit the token's permissions, treat it as sensitive (rotate it if you stop using the skill), and consider disabling autonomous invocation or the skill when not needed to avoid continuous access. If you cannot confirm the endpoint or author identity, do not provide your API key.
功能分析
Type: OpenClaw Skill
Name: yapp
Version: 1.0.3
The skill requests a 'Yapp' API key and communicates with a generic-looking endpoint (yyy-production.up.railway.app) to fetch voice transcripts. While the instructions in SKILL.md align with the stated purpose of a journaling integration, the requirement to poll the external service on every heartbeat and the use of a placeholder-style domain for a production service are potential indicators of data harvesting or excessive data exposure.
能力评估
Purpose & Capability
The SKILL.md requires the user's Yapp API key (starts with "yapp_") and instructs saving it to config so the agent can poll an API for transcripts. However, the registry metadata lists no required credentials or primaryEnv. The endpoint used (yyy-production.up.railway.app) is not an obvious official Yapp domain and there is no homepage or provenance information. Requesting an API key is plausible for the described purpose, but the absence of that requirement in metadata and the unknown host are inconsistent and suspicious.
Instruction Scope
Runtime instructions direct the agent to poll GET https://yyy-production.up.railway.app/api/transcripts/new?since=<ISO_TIMESTAMP> with a Bearer token on every heartbeat and to 'store any facts, preferences, or commitments' from transcripts. The doc also contradicts itself (it tells the agent to 'notify the user with a brief summary' but later says 'Don't summarize unless asked'). The skill tells the agent to persist the API key to its config (unspecified location/retention). Polling on every heartbeat plus persistent storage of a bearer key and storing user statements raises privacy and data-retention concerns.
Install Mechanism
This is an instruction-only skill with no install spec and no code files, so it does not write new binaries or download archives. That reduces some risk. However, the network endpoint used for fetching transcripts is a railway.app host (a 3rd-party hosting platform) rather than a clear official Yapp domain, which reduces provenance confidence.
Credentials
The SKILL.md expects a Yapp API key and persistent storage, but the registry lists no required env vars or primary credential. Asking for a single service token is proportionate to the described function, but the skill's metadata failing to declare that credential and instructing persistent storage of the secret is a mismatch and a red flag. No other environment variables are requested.
Persistence & Privilege
The skill is not 'always: true' and is user-invocable (normal). However, it explicitly instructs saving the API key to config and polling on every heartbeat, which implies ongoing/continuous access if enabled. Persistent credentials plus autonomous invocation increase the potential blast radius — consider this when deciding whether to enable it long-term.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install yapp - 安装完成后，直接呼叫该 Skill 的名称或使用
/yapp触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.3
**Yapp 1.0.3 Change Highlights**
- Revised the setup process: now, simply save the Yapp API key—no longer need to give special values back to the user.
- Detailed instructions for automatically polling and fetching new voice recordings using the Yapp API.
- Added guidance to check for new recordings on every heartbeat and also in response to user requests.
- Clarified expected handling of recordings: focus on processing, summarizing, and engagement—don’t echo back transcripts.
- Updated do’s and don’ts for responding to new recordings and transcription imperfections.
v1.0.2
- Updated Yapp setup flow: users now copy and paste a webhook URL and bearer token directly into the Yapp app.
- Removed automatic registration HTTP call; manual setup by the user is now required.
- Added clear, copy-friendly instructions for sharing the webhook URL and bearer token with Yapp.
- No changes to how voice memos are received or processed.
v1.0.1
- Changed setup process: replaced local setup script with in-app API registration instructions using a POST request.
- Updated SKILL.md to reflect the new registration flow, including API endpoint, request headers, and response handling instructions.
- Removed obsolete setup script: scripts/register.py.
v1.0.0
- Initial release of the yapp skill with voice recording integration.
- Setup instructions provided for connecting your Yapp account using an API key.
- Skill processes messages containing transcribed voice memos with metadata, transcription notes, and speaker labels.
- Guidance included for engaging with raw, unpolished user recordings and handling diarization imperfections.
- Recommends natural engagement, follow-up questions, and thematic reflection without unnecessary summarization.
元数据
常见问题
yapp 是什么？
Receive and engage with transcribed voice memos from Yapp, a voice journaling app, capturing raw, unedited speech-to-text recordings with metadata. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 158 次。
如何安装 yapp？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install yapp」即可一键安装，无需额外配置。
yapp 是免费的吗？
是的，yapp 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
yapp 支持哪些平台？
yapp 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 yapp？
由 EaRu723（@earu723）开发并维护，当前版本 v1.0.3。
推荐 Skills