← 返回 Skills 市场
85
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install zlibrary2kindle
功能描述
Search Z-Library for books, download them, and send to your Kindle.
安全使用建议
The SKILL.md and the registry entry do not match: the instructions clearly require a Z-Library account and SMTP credentials (including a Gmail App Password) and write session cookies to ~/.cache and downloads to /tmp, but the registry lists no required env vars or config paths. Before installing: 1) Do not paste your primary Gmail password or other primary-account secrets into environment variables for an untrusted skill — use an app-specific or throwaway account. 2) Ask the publisher for an explicit manifest that declares required env vars and config paths, and for a source or homepage so you can review code. 3) Consider running the CLI in a sandbox or isolated account to limit cookie and download exposure. 4) Be aware of legal/ethical issues: Z-Library is a site that distributes copyrighted works; confirm you are allowed to download the books. If the publisher cannot explain why these credentials are required and show a trustworthy source, avoid installing or using this skill.
功能分析
Type: OpenClaw Skill
Name: zlibrary2kindle
Version: 0.1.1
The skill bundle provides a CLI interface to search, download, and email books from Z-Library to a Kindle device. It requires high-risk sensitive information, including Z-Library credentials and Gmail SMTP App Passwords, stored as environment variables. While the instructions in skill.md are transparent and align with the stated functionality, the handling of plain-text credentials and the execution of an external package (zlibrary2kindle) via uvx or pip pose a potential security risk, as the skill relies on the integrity of an external third-party dependency to handle these secrets.
能力标签
能力评估
Purpose & Capability
The skill claims to search Z-Library and email files to Kindle, which plausibly requires a Z-Library login and SMTP credentials; however the registry metadata lists no required environment variables or primary credential. The SKILL.md requires ZLIBRARY_EMAIL, ZLIBRARY_PASSWORD, SENDER_EMAIL, SENDER_PASSWORD and optional SMTP settings — those are not declared in the skill's manifest, indicating an incoherence between declared requirements and actual needed capabilities.
Instruction Scope
The instructions tell the agent to authenticate to ZLibrary (saving session cookies to ~/.cache/zlibrary2kindle/session.json), download files to /tmp/zlibrary2kindle/downloads/, and send email via SMTP. These actions involve reading/writing user home config and persistent cookies and handling sensitive credentials. The manifest did not surface these file paths or credential uses. The SKILL.md also instructs setting environment variables with plaintext passwords (Gmail App Password), which broadens the runtime data surface.
Install Mechanism
This is an instruction-only skill with no install spec or code files; that minimizes installation risk because nothing is fetched or written by an installer. The guidance references installing a pip package as an option, but no install behavior is included in the registry entry itself.
Credentials
The skill requires multiple sensitive secrets (ZLibrary credentials and an SMTP sender email and app password). While SMTP credentials are technically necessary to email a file to Kindle, the registry entry declares none of these as required env vars, and no primary credential is identified. Asking users to place long-lived credentials (especially Gmail app passwords) in environment variables is a sensitive practice that should be explicit in the manifest and justified.
Persistence & Privilege
The skill is not always-enabled and does not request elevated platform privileges. It does write session cookies to ~/.cache and downloads to /tmp, which are moderate local persistence actions but reasonable for a CLI that needs login caching. The manifest should nevertheless declare those config paths so users know what will be written to their home directory.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install zlibrary2kindle - 安装完成后，直接呼叫该 Skill 的名称或使用
/zlibrary2kindle触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v0.1.1
- Added support for searching, downloading (EPUB preferred), and emailing books from Z-Library to your Kindle.
- Introduced CLI tools: login, search, download, and send.
- Session management with authentication caching.
- Environment variable configuration for user credentials and email settings.
- Quick workflow and setup documentation included.
元数据
常见问题
ZLibrary2Kindle 是什么？
Search Z-Library for books, download them, and send to your Kindle. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 85 次。
如何安装 ZLibrary2Kindle？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install zlibrary2kindle」即可一键安装，无需额外配置。
ZLibrary2Kindle 是免费的吗？
是的，ZLibrary2Kindle 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
ZLibrary2Kindle 支持哪些平台？
ZLibrary2Kindle 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 ZLibrary2Kindle？
由 SemiHum（@semihum）开发并维护，当前版本 v0.1.1。
推荐 Skills