刷题网页生成器
v1.0.0生成适合学生使用的交互式刷题单文件 HTML 网页应用,支持练习、考试、背题、错题重练四种模式,零外部依赖,可直接部署到服务器。哪怕用户没有明确叫出本技能的名字,只要提到"帮我把这些题做成刷题网页"、"生成一个考试页面"、"制作交互式题目"、"把题库做成 HTML"、"给学生做一个测试工具",就应当立即使用本技能...
⭐ 0· 58·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name and description match the SKILL.md: producing a single-file interactive quiz HTML app. The declared footprint (no binaries, no env vars, no install, instruction-only) is proportional to that purpose.
Instruction Scope
SKILL.md stays focused on parsing user-provided questions and producing a full .html file with four modes, inline assets, and top-level QUESTION_BANK. Two items to note: (1) it asks the agent to 'proactively parse messy inputs' (Word copy, screenshots) which implies OCR/formatting heuristics but does not instruct use of external tools — this is reasonable but may require follow-up with the user about input format (images need OCR). (2) it implicitly references combining with a separate frontend-dev skill for aesthetics without declaring that dependency; this is scope creep but not a security issue.
Install Mechanism
No install spec or code files are present; the skill is instruction-only, which minimizes installation risk.
Credentials
No environment variables, credentials, or config paths are requested. The main privacy/security consideration is that the generated .html will embed correct answers and (if used) exported student progress JSON in plain text, which is expected behavior for an offline single-file quiz app but could leak exam answers if published.
Persistence & Privilege
The skill requests that the generated app persist progress to localStorage and support import/export — this is appropriate for the app's functionality and does not change agent privileges. Also the SKILL.md wording about 'immediately use this skill whenever certain phrases are mentioned' is a usage preference and not an actual platform-level privilege (the skill is not marked always:true).
Assessment
This skill is coherent and doesn't request secrets or installs, but review these points before use: 1) The produced HTML will include QUESTION_BANK with answer keys and explanations in plain JS at the top — do NOT distribute that file to students if you need to prevent answer leakage; consider generating a separate 'exam' build that omits answers. 2) The app persists progress to localStorage and supports import/export JSON; treat exported files as potentially sensitive student data. 3) If your source material contains images (screenshots of questions), clarify whether you want the agent to OCR them — SKILL.md expects the agent to 'intelligently parse' messy input but provides no OCR instructions. 4) SKILL.md suggests combining with a 'frontend-dev' aesthetic standard; if you care about a particular look, provide explicit style guidance or request an alternative (plain CSS) so the agent doesn't call other skills. 5) Confirm where you want the file saved and test the generated HTML locally before deploying to students. If any of these behaviors are unacceptable (e.g., you need an exam distribution without embedded answers), ask the skill to produce a variant that strips answers or locks the exam mode.Like a lobster shell, security has layers — review code before you run it.
latestvk978n2h25sj237khhr8avj27q98451hc
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
