YoudaoNote

Use when the user wants to interact with YoudaoNote (有道云笔记) — listing, reading, creating, searching notes, clipping web pages, or saving Markdown/mindmap not...

This skill appears to be a genuine usage guide for a YoudaoNote CLI, but the SKILL.md tells you to run a remote install script (curl | bash). That action will execute code from a remote server on your machine — treat it as risky unless you trust the source. Before installing: (1) verify the installer URL belongs to the official vendor (artifact.lx.netease.com appears related to NetEase but confirm official documentation), (2) fetch the script first (curl … -o install.sh) and review its contents and any checksums/signatures instead of piping to bash, (3) prefer installing from a trusted package manager or signed release when available, (4) run the installer in a sandbox/VM if possible, and (5) verify where the CLI stores your API key and what network calls it makes. If you cannot verify the installer's provenance or inspect it safely, avoid running the script.

Type: OpenClaw Skill Name: youdao-note Version: 1.0.0 The skill bundle provides instructions and documentation for a command-line interface to interact with YoudaoNote (a legitimate service by NetEase). While it includes a 'curl | bash' installation pattern in SKILL.md, the source domain (artifact.lx.netease.com) and the API configuration endpoint (mopen.163.com) are official NetEase properties. The tool's capabilities—listing, reading, and creating notes—are consistent with its stated purpose and show no evidence of malicious intent or data exfiltration.