Wiz Migration

为知笔记迁移辅助技能，提供自动检测存储目录、导出操作引导、附件批量迁移等完整迁移流程

This skill appears to implement the advertised Wiz-note migration features and works only with local files, but there are packaging and safety issues you should consider before installing: - Packaging inconsistencies: the package references entry points and a batch file that aren't present; an import in __init__.py is malformed (hyphen in module name) and may cause runtime errors. Expect possible failures when invoking start_wizard() or the package entrypoint. - Batch script execution: the migrator can write and run a temporary .bat file or run a user-supplied batch script. Only run this skill on a machine you control and after inspecting any batch scripts; do not run it on sensitive systems without review. - Back up data first: the tool manipulates/copies attachments. Make a full backup of the source folder before running. - Inspect source code: if you can, open scripts/migrator.py and any batch scripts to confirm there are no unexpected commands (network calls, deletion, or uploads). The Python code here does local copy operations; check for any modifications in the packaged version you install. - Verify provenance: skill.json points to a GitHub repo but top-level metadata says source unknown — if provenance matters, follow the repository link and confirm the upstream project and releases. If you need help examining the batch script or validating the package before running, provide the batch file content or run the included Python functions in a sandbox/non-production environment.

Type: OpenClaw Skill Name: wiz-migration Version: 1.0.0 The skill is designed for migrating Wiz Note data but contains a significant shell injection vulnerability in `scripts/migrator.py`. The `_run_batch_script` function performs unsafe string replacement of user-provided directory paths into a batch script template, which is then executed using `subprocess.run(shell=True)`. While the tool's functionality aligns with its stated purpose and no evidence of intentional malice or data exfiltration was found, this implementation allows for arbitrary command execution if directory paths are maliciously crafted.