Wiki.js CLI

Command-line tool to manage Wiki.js content, pages, assets, templates, and backups via its GraphQL API with search, update, sync, and analysis functions.

This package appears to be a genuine Wiki.js CLI: it expects a config file at ~/.config/wikijs.json containing your wiki URL and an API token and will use that token to call your Wiki.js instance. Before installing or supplying credentials, do the following: 1) Verify the upstream source — the registry metadata lacks a homepage but package.json points to a GitHub repo; confirm that repo and maintainer are trustworthy. 2) Inspect package.json and node dependencies (npm install will fetch them). 3) Review the config file contents you will place at ~/.config/wikijs.json and ensure the API token has minimal permissions needed (avoid using a full-admin token if possible). 4) Be aware the CLI will create cache (~/.cache/wikijs-cli) and may write backups to configured directories — pick safe locations. 5) If you need stronger isolation, run npm install and the CLI in a disposable environment/container or on a machine account with limited privileges. The main inconsistency is that the skill metadata did not declare the required config path/credential; if that matters for your risk posture, ask the publisher to update metadata or provide a signed, canonical upstream release link before installing.

Type: OpenClaw Skill Name: wikijs Version: 1.4.0 The OpenClaw AgentSkills skill bundle for Wiki.js CLI is classified as benign. All observed file system and network access capabilities are directly aligned with the stated purpose of managing Wiki.js content and assets. Crucially, the `lib/api.js` file implements robust input sanitization (`sanitizeString`, `validateId`, `validatePath`) to prevent GraphQL injection and ensure safe handling of user-supplied data. No evidence of intentional harmful behavior, such as data exfiltration to unauthorized endpoints, persistence mechanisms, or prompt injection against the AI agent, was found in the code or documentation (`SKILL.md`, `README.md`). Dependencies listed in `package.json` are standard for a Node.js CLI application.