中文 EN
Start Review
Skill Trust Decision

onenote-notes

纯文档型 OneNote 技能，依赖第三方 ClawLink 服务进行 OAuth 代理，无本地代码执行，风险主要来自第三方服务供应链信任问题

Install decision first Source: ClawHub Scanned: Jun 17, 2026
Files 2
Artifacts 14
Violations 0
Findings 3

Why this conclusion was reached

0/4 dimensions flagged
Pass
Declared vs actual capability

Declared resources and inferred behavior are broadly aligned.

Review
Hidden execution and egress

14 lower-risk artifacts were extracted and still need context.

Pass
Attack chain and severe findings

There is no explicit malicious chain in the report.

Review
Dependencies and supply chain hygiene

Dependency information is incomplete, so supply-chain confidence stays limited.

What drove the risk score up

第三方 OAuth 代理依赖 +10

凭证通过 claw-link.dev 中转，存在供应链信任风险

shell 命令声明 +5

文档包含 CLI 命令但属于标准操作且需用户确认

无代码实现 +-5

纯文档型 skill，无法进行代码层恶意行为分析

Most important evidence

Medium Supply Chain

第三方 OAuth 代理服务依赖

此 skill 通过 ClawLink (claw-link.dev) 托管的 OAuth 流程管理 Microsoft 凭证。用户需要授权 ClawLink 访问其 Microsoft 账户，这意味着 OAuth token 将被发送到第三方服务。

SKILL.md:1
确认 ClawLink 服务的隐私政策、安全认证和数据处理合规性。仅使用可信的第三方集成服务。
Low Doc Mismatch

功能完全依赖外部服务

此 skill 为纯文档型，无任何 scripts/ 代码文件。所有声称功能完全通过调用外部 ClawLink 服务实现，无法验证实际代码行为与文档描述是否一致。

SKILL.md:1
这是 AI skill 的正常模式，但用户应理解功能受限于 ClawLink 服务的可用性和行为。
Low Priv Escalation

写操作工具声明过于宽泛

工具引用表格中包含大量 Write 操作 (create, update, delete)，且 SKILL.md 声明 'All write operations require explicit user confirmation'。虽然有确认机制，但删除操作若误用可能导致数据损失。

SKILL.md:110
删除操作前应提供额外的安全提示，如备份确认。

Declared capability vs actual capability

Filesystem Pass
Declared NONE
→
Inferred NONE
SKILL.md 无文件读写声明
Network Pass
Declared NONE
→
Inferred NONE
通过外部 ClawLink 服务 API 间接调用，无直接网络声明
Shell Pass
Declared NONE
→
Inferred READ
文档提及 CLI 命令但需用户手动执行确认
Environment Pass
Declared NONE
→
Inferred NONE
SKILL.md 无环境变量访问声明
Skill Invoke Pass
Declared NONE
→
Inferred READ
通过 clawlink_* 工具间接调用其他 skill
Clipboard Pass
Declared NONE
→
Inferred NONE
SKILL.md 无剪贴板操作声明
Browser Pass
Declared NONE
→
Inferred NONE
文档指导用户手动打开 URL，无自动化浏览器控制
Database Pass
Declared NONE
→
Inferred NONE
SKILL.md 无数据库操作声明

Suspicious artifacts and egress

Medium External URL
https://claw-link.dev/?utm_source=clawhub&utm_medium=referral&utm_content=onenote-notes

SKILL.md:12

Medium External URL
https://claw-link.dev/dashboard?add=onenote

SKILL.md:77

Medium External URL
https://claw-link.dev/dashboard?add=onenote.

SKILL.md:235

Medium External URL
https://learn.microsoft.com/en-us/graph/api/resources/onenote

SKILL.md:305

Medium External URL
https://learn.microsoft.com/en-us/graph/api/resources/notebook

SKILL.md:306

Medium External URL
https://learn.microsoft.com/en-us/graph/api/resources/page

SKILL.md:307

Medium External URL
https://learn.microsoft.com/en-us/graph/api/resources/section

SKILL.md:308

Medium External URL
https://docs.claw-link.dev/openclaw

SKILL.md:310

Medium External URL
https://claw-link.dev/verify

SKILL.md:311

Medium External URL
https://clawhub.ai/hith3sh/onedrive-files

SKILL.md:315

Medium External URL
https://clawhub.ai/hith3sh/microsoft-excel-spreadsheets

SKILL.md:316

Medium External URL
https://clawhub.ai/hith3sh/outlook-inbox

SKILL.md:317

Dependencies and supply chain

There are no structured dependency warnings.

File composition

2 files · 369 lines
Markdown 2 files · 369 lines
Files of concern · 2
SKILL.md Markdown · 323 lines
第三方 OAuth 代理服务依赖 · 功能完全依赖外部服务 · 写操作工具声明过于宽泛 · https://claw-link.dev/?utm_source=clawhub&utm_medium=referral&utm_content=onenote-notes · https://claw-link.dev/dashboard?add=onenote · https://claw-link.dev/dashboard?add=onenote. · https://learn.microsoft.com/en-us/graph/api/resources/onenote · https://learn.microsoft.com/en-us/graph/api/resources/notebook · https://learn.microsoft.com/en-us/graph/api/resources/page · https://learn.microsoft.com/en-us/graph/api/resources/section · https://docs.claw-link.dev/openclaw · https://claw-link.dev/verify · https://clawhub.ai/hith3sh/onedrive-files · https://clawhub.ai/hith3sh/microsoft-excel-spreadsheets · https://clawhub.ai/hith3sh/outlook-inbox
skill-card.md Markdown · 46 lines
https://clawhub.ai/user/hith3sh · https://clawhub.ai/hith3sh/onenote-notes

Security positives

完整的写操作预览和确认机制 (clawlink_preview_tool)
安全声明明确：所有写操作需用户确认，破坏性操作需二次确认
详细的错误处理和故障排除指南
通过 Microsoft Graph API 官方接口访问，数据操作有审计
明确的资源范围限制：仅限连接的 Microsoft 账户内的数据