yuque-lakebook-export — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited yuque-lakebook-export (Agent Skill) and scored it 96/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 1 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 1 flagged
A bulleted imperative like {match} tells the agent to never reveal, disclose, or mention something to the user. Used adversarially it can instruct the agent to hide its tool calls or lie about what it did — stripping the transparency a user relies on to trust the agent.
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Convert Yuque knowledge bases, Yuque documents, or .lakebook files into local Markdown folders prepared for Obsidian. The workflow supports single or batch exports and cleanup for common migration issues such as missing images, cropped image mismatches, broken internal links, wrong folder hierarchy, and Markdown table rendering problems.
Use this skill when the user asks for:
.lakebook filesDo not use this skill for:
.lakebookuv consistently. Do not create temporary .venv or similar task-local environments in the working directory.uv command, first check whether uv is available in the environment.uv is not installed or not available in PATH, the agent must ask the user for confirmation before installing uv. Do not install it silently.uv sync or uv run python scripts/cli.py ..., the agent must first switch into the installed skill tool directory, meaning the directory that contains this SKILL.md, pyproject.toml, uv.lock, and scripts/. Do not run these commands directly from the .lakebook source directory, the output directory, or the user's current workspace root.uv run python scripts/cli.pyuv synccd /path/to/installed-skill-root
uv sync
uv run python scripts/cli.py ...uv run python scripts/cli.py -l "/path/to/your_file.lakebook" -o "/target/root"uv run python scripts/cli.py -l "/path/to/your_file_1.lakebook" "/path/to/your_file_2.lakebook" -o "/target/root"scripts/cli.py still supports interactive terminal selection for manual human use, agents must not rely on interactive mode because they cannot reliably capture terminal interaction state. Always pass explicit -l and -o arguments.uv from the skill tool directory.<!doctype lake> at the start of the document body; older implementations could render this as a stray lake## prefix in Markdown. The current skill implementation already handles this case..md files exist.assets folders existlake## prefix.lakebook files.For detailed behavior, troubleshooting, and output rules, read references/usage.md.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.