youdaonote
What this skill does
A tool for interacting with YoudaoNote (有道云笔记), allowing users to perform CRUD operations on notes, manage to-do lists, and more.
github/netease-youdao - Installation Script - 5.9k stars
Threat analysis
Skill info
pkg:github/netease-youdao/LobsterAI@bef896b?skill=youdaonoteAssessments (1)
Installation Script
Installation Script via local-llm-review
SKILL.md
The script `curl -fsSL https://artifact.lx.netease.com/download/youdaonote-cli/install.sh | bash -s -- -f -b ~/.local/bin` is used for installing the CLI. While this is a common practice, it could be Badge
Add the Anomity scan badge for youdaonote to your README.
How Anomity governs this at runtime
Scan-time vetting tells you what a skill says it will do. Anomity's Endpoint Sensor sees what agents actually do: it discovers skills alongside every other AI artifact on the endpoint, and runtime governance can allow, deny, or log the tool calls a skill triggers. Policy violations route to your SIEM, Slack, email, or Jira, backed by a queryable 90-day audit trail.
Book a 30-minute demo to see your own skill inventory.
Methodology and disputes
Every skill is assessed by the Anomity Skill Intelligence engine against its public source; findings indicate risk patterns, not confirmed exploitation. Maintainer of youdaonote? Report an issue or request a rescan.
