Zettelkasten - 卡片笔记

Zettelkasten - Card box note taking system with AI insights

This skill appears to do what it says: a local Zettelkasten note tool implemented in Python. Before installing or running anything, review the included scripts: install.sh will copy the Python and SKILL.md into ~/.openclaw/skills (normal), and zettelkasten.py will create a local JSON database file per user. The only noteworthy file is publish.sh — it attempts to read ~/.clawhub/credentials and upload an archive to api.clawhub.com if you execute it. That publish script is a publishing helper (not needed for normal use) but could expose or use your Clawhub token if you run it. Recommendation: inspect the files yourself, run the Python code in a sandbox or with limited permissions, and do not run publish.sh unless you intend to publish and trust the environment. If you want extra assurance, run the code in a disposable environment or review the source lines that handle file writes and network calls (publish.sh is the only file with a network call).

Type: OpenClaw Skill Name: zettelkasten Version: 1.0.0 The skill bundle implements a Zettelkasten note-taking system. The `install.sh` script performs standard file copying to the local skill directory. The `zettelkasten.py` script handles note creation, tagging, and AI-like insights using local file storage and string processing, without any network calls or dangerous system commands. The `publish.sh` script reads `~/.clawhub/credentials` to authenticate with `api.clawhub.com` for publishing the skill, which is its intended and legitimate purpose, not a general credential exfiltration. No prompt injection attempts against the agent were found in `SKILL.md` or the Python code.