技能详情（站内镜像，无评论）
许可证：MIT-0
MIT-0 ·免费使用、修改和重新分发。无需归因。
版本：v1.0.0
统计：⭐ 0 · 36 · 0 current installs · 0 all-time installs
⭐ 0
安装量（当前） 0
🛡 VirusTotal ：可疑 · OpenClaw ：良性
Package：claireaicodes/ms-forms-auto
安全扫描（ClawHub）
- VirusTotal ：可疑
- OpenClaw ：良性
OpenClaw 评估
The skill's code and runtime instructions match its stated purpose (automating Microsoft Forms submissions via Playwright + MFA + calendar data); it asks for sensitive local credentials and calendar URLs but does not contain hidden endpoints or incoherent requirements.
目的
Name/description (MS Forms automation, dual calendars, M365 MFA) align with the included scripts: calendar fetching, Playwright-based login & submission, MFA handling, and credential setup. No unrelated services or env vars are requested.
说明范围
SKILL.md instructs the user to save M365 email/password to config/credentials.json and to provide calendar URLs (config/calendars.json) that can contain auth tokens. Scripts also save storageState.json and produce screenshots/HTML (login-debug, login-debug screenshots). All of these actions are coherent with automating login/submission but mean sensitive data (passwords, session cookies, calendar tokens, HTML snapshots) are stored locally. The…
安装机制
No special install spec in registry, but package.json requires playwright (pulled from npm) and the README expects 'npm install' and 'npx playwright install chromium' which downloads browser binaries. This is a standard but non-trivial install (Playwright downloads large browser artifacts). The sources are public npm/Playwright (not arbitrary URLs).
证书
No environment variables are requested. The skill requires storing M365 credentials (email/password) and calendar URLs/tokens in local config files. These are proportionate to the described functionality, but they are sensitive and merit careful handling (file permissions, gitignore, consider using a dedicated service account or limited account).
持久
The skill does persist data (storageState.json, credentials.json, calendars.json, screenshots) but does not request always:true or system-wide privileges. Persisting auth state and credentials is expected for this automation, but it increases the blast radius if the filesystem containing these files is exposed.
scripts/calendar-fetch.js:26
File read combined with network send (possible exfiltration).
综合结论
This skill appears to do what it says, but it requires highly sensitive data and local persistence. Before installing: 1) Prefer a dedicated/limited M365 account (not your primary interactive account) if possible. 2) Keep config/credentials.json and config/calendars.json protected (file mode 600, ensure they are in .gitignore and not backed up to untrusted services). 3) Be aware the skill saves browser storageState (cookies/tokens) and HTML/sc…
安装（复制给龙虾 AI）
将下方整段复制到龙虾中文库对话中，由龙虾按 SKILL.md 完成安装。
请把本段交给龙虾中文库（龙虾 AI）执行：为本机安装 OpenClaw 技能「MS Forms Auto」。简介：Automate Microsoft Forms daily submissions with M365 MFA support and dual-calen…。
请 fetch 以下地址读取 SKILL.md 并按文档完成安装：https://raw.githubusercontent.com/openclaw/skills/refs/heads/main/skills/claireaicodes/ms-forms-auto/SKILL.md
（来源：yingzhi8.cn 技能库）SKILL.md
暂无本地缓存内容，可在后台执行详情同步。