TeacherKit - AI 备课助手

Security checks across static analysis, malware telemetry, and agentic risk

Overview

This looks like a straightforward lesson-preparation tool; installing it means saving included Python tool code, but no credentials, external calls, or broad system access are shown.

This appears safe for normal lesson-preparation use. Before installing, review the Python file because OpenWebUI will run it as a tool, and check generated lesson plans or quizzes for accuracy before using them with students.

Static analysis

No static analysis findings were reported for this release.

VirusTotal

VirusTotal findings are pending for this skill version.

View on VirusTotal

Risk analysis

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

#
ASI01: Agent Goal Hijack
Low
What this means

If source material contains misleading instructions, the model may produce a poorly formatted or off-goal quiz, but no external action or system access is implicated.

Why it was flagged

The quiz prompt directly embeds user-provided content into the model prompt. This is central to generating quizzes, but pasted text containing instructions could influence the generated output.

Skill content
## 出题依据 ... {content_or_topic} ... ## 出题要求
Recommendation

Review generated educational content before use; the author could further delimit source material and tell the model not to follow instructions inside pasted content.

#
ASI04: Agentic Supply Chain Vulnerabilities
Low
What this means

A user must trust and review the included Python code before saving it into their OpenWebUI environment.

Why it was flagged

The README asks the user to install the included Python tool code manually in OpenWebUI. This is disclosed and purpose-aligned, but users should recognize they are installing executable tool code, not only reading prompt instructions.

Skill content
Go to **Workspace → Tools → "+"**; Paste the contents of `teacher_kit.py`; Click **Save**
Recommendation

Install only from a trusted source and review the included teacher_kit.py before saving; no extra credentials or environment permissions appear necessary.