为知笔记skills

Use when documents must be read from or maintained in a WizNote or 为知笔记 server, mirrored into a local repository, or organized under a configurable note cate...

This package appears to implement a legitimate WizNote sync helper, but two things to check before installing: (1) the SKILL.md and code expect three sensitive environment variables (WIZNOTE_BASE_URL, WIZNOTE_USER, WIZNOTE_PASSWORD) even though the registry metadata does not declare them — confirm you will supply credentials manually and that any automated installer will not expose secrets; (2) the skill will make network requests to whatever base URL you provide and will write mirror files under the repo path you choose. Recommendations: review the included Python files yourself (they are short and readable), run tests locally, avoid putting long-lived plaintext passwords into shell startup files (consider ephemeral tokens or a secrets store), ensure the WizNote base URL uses HTTPS and points to a trusted host, and run the skill in an isolated environment or with minimal privileges until you are comfortable with its behavior.

Type: OpenClaw Skill Name: wiznote-docs Version: 1.0.0 The wiznote-docs skill bundle is a legitimate tool designed to synchronize documents between a WizNote server and a local repository. The code in wiznote_cli.py and wiznote_helper.py implements standard API interactions and includes robust security checks, such as path traversal prevention in mirror_output_path and resolve_category. Credentials are handled via environment variables or explicit arguments, and there is no evidence of data exfiltration, malicious execution, or prompt injection.