← 返回 Skills 市场
WizNote
作者
wangfengxiang
· GitHub ↗
· v1.0.0
· MIT-0
94
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install wiznote
功能描述
WizNote private API connector for reading and writing notes via RESTful API. Use when the user mentions "为知笔记", "WizNote", "Wiz", or needs to search, create,...
安全使用建议
This package largely does what it says (WizNote private API client), but there are several inconsistencies you should consider before installing:
- Metadata mismatch: The registry lists no required environment variables or dependencies, but SKILL.md and the code require WIZ_ENDPOINT and WIZ_USER (WIZ_TOKEN optional) and the Python 'requests' package. Expect to set these and to pip-install requests manually unless the platform does it for you.
- Secrets handling: The skill advises storing tokens in environment variables or .env files and the code writes logs to the current working directory. Avoid placing long-lived production credentials in easily readable files; use limited-scope tokens if possible and ensure logs do not retain secrets.
- Source trust: Homepage is missing and the skill owner is unfamiliar; review the included Python files yourself or run the skill in an isolated/test environment before giving real credentials.
- Operational checks: Verify WIZ_ENDPOINT is reachable from your agent, and that the private WizNote deployment uses the endpoints/ports described (80 or 9269). Test with a throwaway account/token first.
If you want to proceed: (1) inspect the scripts for any additional network calls, (2) run in an isolated container or sandbox, (3) do not provide high-privilege credentials until you have validated behavior. If the registry should be authoritative, ask the maintainer to update metadata to declare required env vars and dependencies.
功能分析
Type: OpenClaw Skill
Name: wiznote
Version: 1.0.0
The 'wiznote' skill bundle is a well-documented and professionally structured API connector for WizNote private deployments. It provides comprehensive note-taking functionalities, including CRUD operations, folder management, and advanced search capabilities across several Python scripts (e.g., wiznote_api.py, note_ops.py, search.py). The code implements robust error handling, exponential backoff retries, and local logging without any evidence of data exfiltration, unauthorized remote execution, or malicious prompt injection. All network activities are directed to user-configured endpoints via environment variables.
能力评估
Purpose & Capability
Name/description and the included Python scripts are coherent with a WizNote private API connector (login, CRUD, search, folder ops). However the skill registry metadata claims 'Required env vars: none' while SKILL.md and the code clearly require WIZ_USER and WIZ_ENDPOINT (WIZ_TOKEN optional/used). Also the package does not declare the required 'requests' dependency even though the code exits if requests is missing. These metadata omissions are inconsistent with the skill's stated purpose and will cause surprise or runtime failure.
Instruction Scope
SKILL.md limits actions to interacting with WizNote endpoints, setting WIZ_ environment variables, and describes retries and error handling — all within the stated purpose. It does instruct storing tokens in environment variables and suggests .env or os.environ edits; the code also sets WIZ_KB_GUID in os.environ at login and writes log files (wiznote.log, wiznote_error.log) to disk. No instructions or code were found that read unrelated system files or call external endpoints outside the specified WizNote API.
Install Mechanism
There is no install spec while the package includes multiple Python scripts that depend on the 'requests' library. The code aborts if requests is missing. The absence of a declared dependency (requests) in the registry metadata or an install step is a coherence/operational issue — it increases the chance of runtime errors and unexpected manual steps for the user.
Credentials
The required/used environment variables (WIZ_ENDPOINT, WIZ_USER, optional WIZ_TOKEN, and the code sets WIZ_KB_GUID) are reasonable for a private API connector. But the registry metadata says no env vars required while the code enforces WIZ_USER and uses WIZ_ENDPOINT — a mismatch. The skill asks users to store credentials/tokens in environment variables or .env files; this is functional but has security implications (tokens in files/logs). No unrelated credentials (AWS, GitHub, etc.) are requested.
Persistence & Privilege
The skill does not request always:true and does not modify other skills or system-wide configs. It writes local log files and sets process environment variables (WIZ_KB_GUID) after login; these are limited, expected behaviors for a client library. Autonomous invocation is permitted (platform default) but that is not in itself a new risk here.
如何使用
- 确保已安装 OpenClaw(本地或 Docker 部署)
- 在对话框中输入安装命令:
/install wiznote - 安装完成后,直接呼叫该 Skill 的名称或使用
/wiznote触发 - 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
Initial release: support note CRUD, folder management, and search
元数据
常见问题
WizNote 是什么?
WizNote private API connector for reading and writing notes via RESTful API. Use when the user mentions "为知笔记", "WizNote", "Wiz", or needs to search, create,... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 94 次。
如何安装 WizNote?
在 OpenClaw 或 Claude Code 对话框中运行命令「/install wiznote」即可一键安装,无需额外配置。
WizNote 是免费的吗?
是的,WizNote 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。
WizNote 支持哪些平台?
WizNote 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。
谁开发了 WizNote?
由 wangfengxiang(@wangfengxiang)开发并维护,当前版本 v1.0.0。
推荐 Skills