hoseo-lms

This skill mostly does what it says (scrapes course info and automates video playback), but there are practical and security concerns you should weigh before installing: - Dependency gap: The code uses Playwright (and thus a browser runtime) but the skill metadata only lists python3. You will likely need to pip install the requirements and run 'playwright install' to get browser binaries. Be careful when installing browser binaries on shared machines. - Credential risk: You must provide your LMS ID/password. The skill stores them in ~/.config/hoseo_lms/credentials.json (plaintext). If you proceed, use a dedicated account or rotate/change your password afterward; ensure the file permissions are set as instructed (chmod 600). - Read-only claim is misleading: The auto_attend automation performs UI actions (login, clicks, accepts dialogs, plays videos). Even if the code does not explicitly submit attendance, automating playback can cause the LMS to record views/attendance. Do not assume this tool cannot affect your LMS records. - Audit and test: If you don't fully trust the source, inspect the code (it is included) and test in a safe environment or with a throwaway account first. Confirm the exact behavior on a non-critical account before using real credentials. - If you decide to install: run pip install -r requirements.txt and then run the Playwright installer (e.g., 'playwright install chromium') as directed by Playwright docs, and review any network activity. Consider running the scraper-only parts first (no Playwright) to verify scraping behavior. Given the inconsistencies and potential for unintended server-side effects, only install if you trust the author and accept the credential risk; otherwise treat this as experimental tooling.