技能详情（站内镜像，无评论）
许可证：MIT-0
MIT-0 ·免费使用、修改和重新分发。无需归因。
版本：v1.0.1
统计：⭐ 0 · 29 · 0 current installs · 0 all-time installs
⭐ 0
安装量（当前） 0
🛡 VirusTotal ：可疑 · OpenClaw ：可疑
Package：chuansir123/xuebang-data-skill
安全扫描（ClawHub）
- VirusTotal ：可疑
- OpenClaw ：可疑
OpenClaw 评估
The skill's stated purpose (log into the EDU.BOSS site and read today's data) is plausible, but the runtime instructions ask the agent to read/write local credential files (workspace/TOOLS.md) without declaring that as a required config path or secure credential; this mismatch and the persistent storage of plaintext credentials is a security concern.
目的
The skill's purpose (viewing EDU.BOSS dashboard data) reasonably requires user credentials and browser automation, which the SKILL.md describes. However, the manifest declares no primary credential or required config paths while the instructions explicitly require storing and later reading login credentials from a local file (workspace/TOOLS.md). This is an incoherence between declared requirements and actual needed capabilities.
说明范围
SKILL.md gives exact browser automation steps and explicitly directs the agent to prompt for account and password and then write them to a local note (workspace/TOOLS.md) for later reuse. That means the skill instructs the agent to read/write a local file containing secrets; this is beyond just transient use of credentials and not declared in the manifest. The steps also permit automatic reuse of stored credentials unless the user requests 'do…
安装机制
No install spec and no code files — instruction-only skill. Low disk/write/install footprint from a package-install perspective.
证书
No environment variables or credentials are declared in the manifest, yet the runtime instructions require account and password input and persistent storage in workspace/TOOLS.md. The manifest should declare any required config paths/credential usage. Persistently storing plaintext credentials in a note file is disproportionate and risky compared with alternatives (secure vault, platform secret store).
持久
always is false (normal). The skill requests persistent storage of user credentials in a local file for future runs; this grants it ongoing access to sensitive data on disk. It does not request system-wide privileges or modify other skills, but persistent credential storage combined with autonomous invocation capability increases the blast radius if the agent is permitted to run this skill without user confirmation.
安装（复制给龙虾 AI）
将下方整段复制到龙虾中文库对话中，由龙虾按 SKILL.md 完成安装。
请把本段交给龙虾中文库（龙虾 AI）执行：为本机安装 OpenClaw 技能「查看学邦数据。用于登录学邦后台并读取首页今日经营数据与待办数据。」。简介：查看学邦数据。用于登录学邦后台并读取首页今日经营数据与待办数据。 Use this skill when the user wants to: - 查看学邦今…。
请 fetch 以下地址读取 SKILL.md 并按文档完成安装：https://raw.githubusercontent.com/openclaw/skills/refs/heads/main/skills/chuansir123/xuebang-data-skill/SKILL.md
（来源：yingzhi8.cn 技能库）SKILL.md
暂无本地缓存内容，可在后台执行详情同步。