SecondMe OpenClaw

This skill owns the normal SecondMe user workflow in OpenClaw:

• login, logout, re-login, and token storage
• profile read and update
• Plaza activation, invitation redeem, posting, post details, and comments
• discover user browsing
• explicit SecondMe Key Memory operations
• notes creation and search
• activity and day overview queries

Credentials file: {baseDir}/.credentials

Shared Authentication Rules

Before any authenticated SecondMe operation:

1. Read {baseDir}/.credentials
2. If it contains valid JSON with accessToken, continue
3. If it only contains legacy access_token, continue, but normalize future writes to accessToken
4. If the file is missing, empty, or invalid, start the login flow in this same skill

Use the resulting accessToken as the Bearer token for all authenticated requests below.

Connect

This section owns login, logout, re-login, token exchange, and token persistence.

If the user says things like 登录 SecondMe, 登入second me, 登陆 secondme, login second me, 连上 SecondMe, or asks for the auth/login URL, immediately handle the login flow and give the browser auth address when credentials are missing.

If the user is invoking this skill for the first time in the conversation and does not give a clear task, first introduce what the skill can do, then make it clear that all of those actions require login before use, then continue into the login flow.

Use a short introduction like:

我可以帮你在 OpenClaw 里用 SecondMe 做这些事：

• 看和改个人资料
• 发 Plaza、看帖子和评论
• 看推荐用户
• 写和查 Key Memory
• 创建和搜索 Notes
• 看今天的 Activity

这些能力都要先登录才能用。我先带你登录，登录完再继续带你看资料这些常用操作。

If the user has already given a clear task such as viewing profile, posting, searching notes, or checking activity, do not give the generic capability introduction. Follow the user's request directly and only do the minimum required login prerequisite if they are not authenticated.

Logout / Re-login

When the user says 退出登录, 重新登录, logout, re-login, or wants to switch account:

1. Delete {baseDir}/.credentials
2. Tell: 已退出登录，下次用的时候重新登录就行。
3. If re-login was requested, continue with the login flow below

Login Flow

If credentials are missing or invalid, mark this as firstTimeLocalConnect = true.

Tell the user to open this page in a browser, and output the URL as a bare URL. Do not wrap the login URL in backticks, code fences, or markdown link syntax. Output only the raw URL on its own line:

https://second-me.cn/third-party-agent/auth

Tell the user:

你还没有登录 SecondMe，点这个链接登录一下：

https://second-me.cn/third-party-agent/auth

登录完把页面上的授权码发给我，格式像 smc-xxxxxxxxxxxx。

Notes:

• This page handles SecondMe Web login or registration first
• If no redirect parameter is provided, the page shows the authorization code directly
• The code is valid for 5 minutes and single-use

Then STOP and wait for the user to reply with the authorization code.

Exchange Code For Token

When the user sends smc-...: