Skill flagged — suspicious patterns detected
ClawHub Security flagged this skill as suspicious. Review the scan results before using.
teaching-materials
v1.0.0中小学教学文档智能生成工具。当用户需要制作课件（PPT）、编写教学设计（教案）、或创建学生任务单（导学案）时使用此技能。支持数学、语文等学科的备课、课堂巩固、课后作业等教学场景的文档生成。
⭐ 1· 124·0 current·0 all-time
byzhanghao@ahao2001
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Suspicious
medium confidencePurpose & Capability
The declared purpose (generate PPTs, lesson plans, task sheets) aligns with the instructions to produce documents, use templates, generate diagrams, and fetch web resources. However, the SKILL.md mandates use of a local script (~/.workbuddy/skills/dragon-ppt-maker/ppt_maker.py) and saving to a Windows-specific path (d:/WorkBuddy/...), which are implementation assumptions not explained in the metadata and may not exist on the user's system.
Instruction Scope
Runtime instructions require automatic web searching, scraping, downloading images and documents, and saving them into a fixed local folder. The skill also instructs the agent to prompt the user for usernames/passwords for third‑party resource sites and to save those credentials locally. There are inconsistencies: parts say 'if login required, prompt user to login manually' while the 'first use' flow demands collecting and storing account credentials. The skill privileges automated network/resource retrieval and local file writes beyond mere content generation.
Install Mechanism
There is no install spec (instruction-only), so nothing is written by the installer. That lowers risk. But the instructions require external local tools/scripts (dragon-ppt-maker, diagram-generator via MCP) that are not provided by the skill bundle; relying on unspecified local scripts/tools is an operational dependency and a potential source of hidden behavior.
Credentials
The skill does not declare environment variables or credentials in metadata but explicitly instructs collecting usernames/passwords for external education sites and persisting them to d:/WorkBuddy/MyTeacher/accounts.json. Requesting and storing user credentials for third‑party sites is sensitive; the metadata should have declared this need. Also the mixture of paths (~/.workbuddy and d:/WorkBuddy) is inconsistent across platforms.
Persistence & Privilege
The skill instructs persistent storage of downloaded resources and user account credentials to fixed local paths. Although 'always' is false, persistent local credential storage increases long‑term risk if the file is not protected. The skill also references and expects to execute local tools/scripts (MCP/mcp-call and dragon-ppt-maker), which implies ongoing reliance on local components.
What to consider before installing
Before installing or using this skill, consider the following:
- Do not paste your site passwords into a skill unless you trust its origin. This SKILL.md asks for usernames/passwords for resource sites and will save them to a local file (d:/WorkBuddy/MyTeacher/accounts.json).
- The skill mandates running a local script (~/.workbuddy/skills/dragon-ppt-maker/ppt_maker.py) and uses MCP/tool calls; verify those scripts/tools exist and inspect their source (they are not included with the skill). Malicious or buggy local scripts could run when this skill executes.
- Paths are inconsistent (mix of ~ and d:/). Confirm the skill is intended for your OS and update paths if needed; running on a different OS may fail or write files to unexpected locations.
- The skill will automatically scrape and download web resources. If you are uncomfortable with automatic downloads or offline storage of third‑party content, require manual approval for each download or avoid providing credentials.
- If you decide to proceed: store credentials in a secure vault, not in plain text; if the skill insists on plain-file storage, refuse to provide passwords and use manual login methods instead.
What would change the assessment to 'benign': the skill declaring and documenting its credential requirements in metadata, removing the need to collect raw passwords (use OAuth or token-based access), providing or linking to the required ppt-maker and MCP tools (so their code can be inspected), and fixing the path/OS inconsistencies.Like a lobster shell, security has layers — review code before you run it.
latestvk978j1skksrmvd22pfk0gn2zh183er31
License
MIT-0
Free to use, modify, and redistribute. No attribution required.