YNote Clip

网页剪藏到有道云笔记。触发词：剪藏网页、保存网页、收藏网页、ynote clip、clip to ynote、网页摘录。

Before installing, review and confirm these items: 1) The embedded DEFAULT_APIFY_TOKEN in twitter-apify.mjs — this allows the skill to use someone else's Apify account (privacy, billing, and abuse risk). Ask the author to remove the hard-coded token and require APIFY_API_TOKEN as an explicit env var. 2) Inspect the base64 payload in static/inject-sdk.fn.js (the atob string) — decode it locally to verify it contains only the intended collect SDK and not hidden exfiltration or remote endpoints. 3) Decide whether you are comfortable the skill asks you to source your shell rc (which exposes any exported secrets) each run; prefer setting YNOTE_API_KEY (and APIFY_API_TOKEN if used) explicitly in the agent's environment rather than relying on sourcing rc files. 4) If you will use the Twitter flow, prefer supplying your own APIFY_API_TOKEN or disable that flow; running with the default token may send scraped content to that third-party account. 5) Consider running the skill in a restricted/sandboxed environment first, and monitor outgoing network calls (especially to apify.com and the MCP endpoint) to ensure they match expectations. If you cannot verify the injected SDK and the embedded token, treat the skill as risky and avoid installing it.

Type: OpenClaw Skill Name: ynote-clip Version: 1.8.1 The skill bundle contains several high-risk patterns and poor security practices. Most notably, SKILL.md instructs the AI agent to 'source ~/.zshrc' or other shell configuration files to load environment variables, which is a dangerous practice that can lead to the leakage of sensitive credentials or the execution of arbitrary shell aliases/functions. Additionally, twitter-apify.mjs contains a hardcoded Apify API token (apify_api_vsVgnrJKGDCfhfTil8FpBaMaM4vexW1TZocw), and inject-sdk.fn.js uses a base64-encoded string to deliver a large minified JavaScript payload for browser execution. While these features appear intended to facilitate web scraping and clipping to Youdao Note, the combination of environment manipulation, hardcoded credentials, and obfuscated payloads warrants a suspicious classification.