Yiliu

Yiliu - AI-powered note-taking knowledge base with semantic search, auto-summarization, and version management

This skill appears to do what it says: local SQLite/LibSQL storage (data/yiliu.db and data/vectors.json), optional OpenAI network calls if you set OPENAI_API_KEY, and local model caching under your home directory for xenova transformers. Before installing: 1) If you don't want note contents sent to OpenAI, do not set OPENAI_API_KEY (the skill falls back to local or keyword search). 2) Review package.json and consider running npm install in an isolated environment (or review dependency list) since it will pull many npm packages. 3) Expect the skill to write files under ./data and to ~/.cache/yiliu/models (configurable via env vars). 4) If you plan to provide an OpenAI key, consider using a restricted key or monitoring usage. 5) If you want extra assurance, inspect the omitted vector/storage files or run the code in a sandbox before granting access to sensitive notes.

Type: OpenClaw Skill Name: yiliu Version: 1.2.3 The "yiliu" skill is a legitimate AI-powered note-taking and knowledge base tool that implements semantic search, auto-summarization, and version control. The code in `src/ai/index.ts` and `src/storage/db.ts` uses LibSQL for local storage and provides a clear fallback mechanism between OpenAI and local HuggingFace models (@xenova/transformers) for embeddings. There are no indicators of data exfiltration, malicious execution, or obfuscation; all behaviors, including network requests to OpenAI and local file system operations in the `data/` directory, are consistent with the stated purpose in `SKILL.md` and `README.md`.