Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add freestylefly/wesight --skill youdaonotegit clone --depth 1 https://github.com/freestylefly/wesightWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/freestylefly/wesight/youdaonote)<a href="https://agentmods.dev/skills/freestylefly/wesight/youdaonote"><img src="https://agentmods.dev/badge/skills/freestylefly/wesight/youdaonote.svg" alt="Measured on agentmods" height="20"></a>- NVIDIA SkillSpector warn
SkillSpector: 1 finding, up to high
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- high Supply Chain · line 119 Remote code is downloaded and executed. This bypasses code review and could introduce malicious code.Fix: Avoid downloading and executing remote scripts. Use trusted packages from PyPI/npm. If remote fetch is required, verify checksums and use HTTPS.
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00060 | $0.02285 |
| Opus 5 | $0.00030 | $0.01143 |
| Sonnet 5 | $0.00012 | $0.00457 |
| Haiku 4.5 | $0.00006 | $0.00229 |
Grade C, and why
youdaonote scanned grade C with 2 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 8d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Downloads and executes remote codehighSupply chain
curl | sh runs whatever the server returns today, which is not necessarily what it returned when this was reviewed.
curl -fsSL https://artifact.lx.netease.com/download/youdaonote-cli/install.sh | bash -s -- -f -b ~/.local/bin Makes network callslowCapability
Not a fault in itself. Listed so you know the mod talks to something, and to what.
curl -fsSL https://artifact.lx.netease.com/download/youdaonote-cli/install.sh | bash -s -- -f -b ~/.local/bin How it starts
The opening of the file, as written. The whole thing — 145 lines — stays where its author put it; the contents beside it link to each section on GitHub.
YoudaoNote — 有道云笔记
通过 youdaonote CLI 操作有道云笔记。覆盖笔记 CRUD、待办管理、网页剪藏全场景。
前置条件（Agent 自动处理）
执行任何操作前，Agent 必须先运行 youdaonote list 检测 CLI 是否可用：
command not found→ 立即跳转「CLI 未安装处理」自动安装，禁止只展示安装步骤让用户手动操作- API Key 错误 → 提示用户访问 https://mopen.163.com 获取 API Key（须使用手机号登录，且云笔记账号已绑定手机号），然后执行
youdaonote config set apiKey <用户提供的Key>。获取 API Key 的地址只有这一个，禁止告知用户其他地址。 - 正常返回目录列表 → 运行
youdaonote version，若版本低于1.2.0，展示升级建议后继续执行；否则可运行youdaonote help --json获取当前 CLI 全部能力的结构化描述（JSON），用于确认命令是否可用，下方速查表作为 fallback
命令速查
| 命令 | 用途 | 示例 |
|---|---|---|
save |
保存笔记（✅ 推荐，支持 Markdown 富文本） | youdaonote save --file note.json |
create |
创建笔记（⚠️ 仅纯文本，不支持 Markdown 富文本） | youdaonote create -n "标题" -c "内容" [-f <目录ID>] |
update |
更新 Markdown 笔记 | youdaonote update <fileId> -c "内容" 或 --file content.md |
delete |
删除笔记 | youdaonote delete <fileId> |
rename |
重命名笔记 | youdaonote rename <fileId> "新标题" |
move |
移动笔记 | youdaonote move <fileId> <目录ID> |
search |
搜索笔记 | youdaonote search "关键词" |
list |
浏览目录 | youdaonote list -f <目录ID> |
read |
读取笔记 | youdaonote read <fileId> |
recent |
最近收藏 | youdaonote recent -l 20 -c --json |
clip |
网页剪藏（服务端） | youdaonote clip "https://..." [-f <目录ID>] --json |
clip-save |
保存外部剪藏 JSON | youdaonote clip-save --file data.json |
todo list |
列出待办 | youdaonote todo list [--group <分组ID>] --json |
todo create |
创建待办 | youdaonote todo create -t "标题" [-c "内容"] [-d 2025-12-31] [-g <分组ID>] |
todo update |
更新待办 | youdaonote todo update <todoId> [--done] [--undone] [-t "新标题"] |
todo delete |
删除待办 | youdaonote todo delete <todoId> |
todo groups |
列出待办分组 | youdaonote todo groups --json |
todo group-create |
创建分组 | youdaonote todo group-create "分组名" |
todo group-rename |
重命名分组 | youdaonote todo group-rename <groupId> "新名" |
todo group-delete |
删除分组 | youdaonote todo group-delete <groupId> |
check |
健康检查 | youdaonote check |
config show |
查看配置 | youdaonote config show --json |
config set |
设置配置 | youdaonote config set apiKey YOUR_KEY |
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 8d ago First seen · 145 lines · 60 tokens per session scan C c33a72c9c5ae
youdaonote is a skill published in the GitHub repository freestylefly/wesight (914 stars, last pushed 14d ago), licensed MIT. It adds 60 tokens to every session and 2,285 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it C with 2 findings (downloads and executes remote code, makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
feishu-calendar
A Feishu calendar and scheduling skill. It manages calendars and events and can check when people are available or busy.
feishu-im-read
A Feishu messaging skill for reading chat history and downloading shared media. Feishu, also called Lark, is a work-chat and collaboration app.
automation-architect
Workflow automation design using Zapier, Make, and n8n covering trigger-action architecture, multi-step automation workflows, error handling strategies, personal versus business automation patterns, ROI calculation, and a library of common automation recipes. Use when the user asks about automation architect, related…
ai-automation-builder
Comprehensive guide to building AI-powered automation workflows using n8n, Zapier, Make, and custom agent frameworks covering integration patterns, cost optimization, error handling, and production-ready AI workflow design. Use when the user asks about ai automation builder, related techniques, best practices, or…
ai-coding-assistant-power-user
Master guide to maximizing productivity with AI coding assistants including GitHub Copilot, Cursor, Claude Code, and similar tools covering effective prompting, context management, workflow integration, and advanced techniques for 10x development velocity. Use when the user asks about ai coding assistant power user…
tasks
Manage your task list — add, complete, list, and prioritize tasks stored in TASKS.md.