Mooc Course Search
v1.0.4MOOC 课程搜索与推荐服务。适用于找课、课程对比、按学习目标筛课、关注证书与评价等场景。关键词：MOOC、慕课、课程推荐、课程对比、证书、考研、机器学习、高等数学。
⭐ 3· 96·0 current·0 all-time
bymooc@acse-yz219
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
Name/description (MOOC course search & recommendation) matches the instructions (generate queryList, call course search and optional detail endpoints, analyze results). The described endpoints point to youdao's mcp service which is consistent with providing course search; the README/SKILL.md roles align with the stated purpose. Small note: the SKILL.md mentions the platform '中国大学 MOOC' while the endpoints are on youdao (plausible aggregator rather than a direct mismatch).
Instruction Scope
Instructions explicitly limit actions to constructing search terms, POSTing to the listed APIs, applying retry/timeouts, and returning analyzed recommendations. There are no directives to read local files, access unrelated environment variables, or exfiltrate data to unknown endpoints. Security constraints in the doc discourage leaking credentials.
Install Mechanism
Instruction-only skill with no install spec or code files to write/execute. This minimizes surface area — nothing is downloaded or installed.
Credentials
The skill declares no required environment variables or credentials (which is appropriate for a public-API instruction-only skill). However, the runtime docs mention handling 'authentication failure' as a possible error case and include constraints about not outputting long-lived credentials; that implies the API could optionally require credentials in some deployments. If credentials are needed in your environment, they should be declared and scoped; currently none are requested, which is a documentation gap rather than a clear mismatch.
Persistence & Privilege
always is false and the skill is user-invocable; it does not request persistent presence or elevated privileges and there is no indication it would modify other skills or system settings.
Assessment
This skill appears coherent and low-risk as it only instructs the agent to call documented Youdao endpoints and produce recommendations. Before installing: (1) confirm with the skill provider whether those endpoints require API keys in your deployment (if so, insist any needed env vars be explicitly declared and scoped); (2) verify the youdao endpoints are acceptable under your privacy/usage policies; (3) test with non-sensitive queries to observe network behavior; (4) don't paste any long-lived credentials into prompts — the skill's docs advise against that. If you need higher assurance, ask the publisher to clarify the authentication model and to provide a signed/official source/homepage.Like a lobster shell, security has layers — review code before you run it.
latestvk97f3edn1xxfw2xwfb8jggdx1s8439fs
License
MIT-0
Free to use, modify, and redistribute. No attribution required.