notes-export-api SKILL.md skillB
notes-export-api from zhaoolee/notes is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add zhaoolee/notes/notes-export-api@git:20260801.295e6f2Pins git:20260801.295e6f2 in mdr.lock. Pin the fingerprint instead.
- Audit grade
- B, 16 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- zhaoolee/notes
- Path
skills/notes-export-api/SKILL.md- Versions recorded
- 5
- Latest version
- git:20260801.295e6f2, committed Aug 1, 2026
- First version recorded
- Apr 28, 2026
- Size
- 7,143 bytes
- Repository stars
- 310
- License
- Apache-2.0
通过 Token 或首次使用的用户名与密码连接调用方明确配置的锤子便签服务,管理当前账号的云端工作区并导出内容。支持便签列表与全文查询、新增、更新 Markdown、软删除、回收站恢复、显式永久删除、文件夹分类、星标、置顶、生成可粘贴到微信公众号的富文本 HTML,以及把 Markdown 或本地 .md 文件导出为带图的锤子便签长图 PNG;导出支持 default 暖白纸感、smartisan-dark 暗黑主题和自定义底部文案。用户提到锤子便签、用 AI 增删改查便签、便签查询或自动维护、分类、收藏、置顶、公众号复制格式、Markdown 转便签图片或批量长图导出时使用。服务地址没有默认值,调用方必须通过 .env 或命令行明确提供。.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# 锤子便签 API 直接调用项目 API,不在本地重写工作区、公众号排版或长图渲染逻辑。 开源地址:`https://github.com/zhaoolee/notes` ## 配置服务 便签管理和长图导出统一使用同一个服务基础地址。推荐写入调用方自己保管、未提交 到版本库的 `.env`: ```dotenv NOTES_API_BASE_URL=http://127.0.0.1:18080 NOTES_API_TOKEN=notes_sk_v1.xxx ``` 没有 Token 时,可临时填写 `NOTES_API_USERNAME` 和 `NOTES_API_PASSWORD`。管理脚本 首次运行会向 `/api/auth/skill-token` 申请 Token,原子更新 `.env`,并移除用户名和 密码。Token 已存在时不再读取账号密码。 如果服务部署在局域网主机或自有域名下,可改为实际地址,例如 `http://192.168.1.20:18080` 或 `https://notes.example.com`。 单人部署时,把项目根目录 `.env` 中 `SUPERADMIN` 和 `SUPERADMINPASSWORD` 的实际值 分别复制到 `NOTES_API_USERNAME` 和 `NOTES_API_PASSWORD`;不要写成变量引用。 普通多用户部署则填写目标普通用户的用户名/邮箱和密码。 两个脚本都可以读取该文件: ```bash node scripts/notes_api.mjs list --env-file /abs/path/notes-api.env scripts/export_note.sh \ --env-file /abs/path/notes-api.env \ --markdown '正文' \ --output /abs/path/note.png ``` 没有 `.env` 时,给命令显式传入同名参数: ```bash node scripts/notes_api.mjs list \ --base-url https://notes.example.com \ --username your-account \ --password your-password scripts/export_note.sh \ --base-url https://notes.example.com \ --markdown '正文' \ --output /abs/path/note.png ``` 如果 `.env` 和命令行都没有服务地址,停止执行并请调用方补充;不得自动探测本地 端口,也不得回退到任何公网服务。 ## 选择工作流 …
Read the whole file at its exact version.
How to install
mdr add zhaoolee/notes/notes-export-api@sha256:f8dca3d05a23c73fThe line at the top of this page pins the label git:20260801.295e6f2, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_dsdiitsizr2den7l)
3 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 5 versions of this file, between Apr 28, 2026 and Aug 1, 2026, about one every 24 days.
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| git:20260801.295e6f2 latest | 2026-08-01 | 295e6f2 | 7,143 B | B | view · diff |
| git:20260801.b78a7f9 | 2026-08-01 | b78a7f9 | 6,850 B | B | view · diff |
| git:20260801.73f5db4 | 2026-08-01 | 73f5db4 | 6,728 B | B | view · diff |
| git:20260730.cbc3a46 | 2026-07-30 | cbc3a46 | 4,701 B | B | view · diff |
| git:20260428.d34ec2d | 2026-04-28 | d34ec2d | 4,791 B | B | view |
Audit of the latest version
- fail: No link to a raw IP address (matched: http://127.0.0.1:18080)
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (7143 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No script tag
Starting a new one? Use a template for SKILL.md on mdpantry, which passes every one of these checks and says what to change in it.
Source
zhaoolee/notes · 310 stars · license Apache-2.0 · pushed 2026-10-11 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_dsdiitsizr2den7l GET https://markdownregistry.com/api/v1/resolve?ref=zhaoolee/notes/notes-export-api GET https://markdownregistry.com/api/v1/blob/f8dca3d05a23c73f0281be382256d9ab2e28b5b2b5748bb1ab691b7c1129dab7
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.