生成读书活动

根据书名生成读书活动，生成详细介绍、每日打卡计划、问答题库等文档

Security Scan

The skill's purpose (generate reading activities) matches its high-level behavior, but there are multiple inconsistencies and missing implementation details (Excel format mismatch, hardcoded Windows paths, missing install steps for pandas/openpyxl, no zipping/recycle implementation) that make its current package unreliable and potentially risky to run without review.

Purpose & Capability

Name/description align with the files and instructions: the skill generates reading activity docs, schedules, and question banks. However the implementation and runtime expectations don't fully match the stated outputs (see instruction/code mismatches below). The required actions (writing files, compressing) are reasonable for the stated purpose, but hardcoded Windows paths (E:\Temp\...) and expectation to produce .xls files conflict with the provided helper.

Instruction Scope

SKILL.md instructs the agent to query book metadata, create files, compress the output, and move originals to the recycle bin. The skill does not specify where to fetch book metadata (no API or source listed) and has no code to perform zipping or moving files to recycle bin. The instructions also require saving .xls files, but the included excelUtils.export explicitly rejects paths ending with '.xls' — this is a direct mismatch and will cause runtime failures. The SKILL.md implicitly requires filesystem and possibly network access; those are within scope for the feature but should be explicit and safe.

Install Mechanism

There is no install specification (instruction-only), which is low risk, but SKILL.md and the python file declare dependencies on pandas and openpyxl. Because there is no install step or environment declaration, the agent may lack these libraries at runtime, causing failures. No downloads or external installers are present (so low supply-chain risk), but missing dependency handling is an operational issue.

Credentials

The skill requests no environment variables, credentials, or config paths. That is proportionate to its stated functionality (document generation).

Persistence & Privilege

Flags show always:false and normal autonomous invocation. The skill does not request persistent privileges or modify other skills. It does require filesystem write access to create output files, which is expected for document generation but should be made configurable rather than hardcoded.

What to consider before installing

This skill is plausible for generating reading-activity documents, but several implementation and configuration issues should be resolved before installation or use: - Fix the Excel format mismatch: SKILL.md expects .xls files, but scripts/excelUtils.py explicitly rejects '.xls'. Either change the instructions to produce .xlsx (supported by pandas/openpyxl) or update the export function to actually write .xls if that is required. - Make output paths configurable and cross-platform: SKILL.md uses a hardcoded Windows path (E:\Temp\ReadingActivities). That will fail on non-Windows systems and may try to write to unexpected locations. Ask the author to accept a user-provided folder. - Provide explicit dependency/install instructions: pandas and openpyxl are required by the Python helper but there is no install spec. Ensure the runtime environment has these packages or include an install step. - Implement missing steps or document required agent actions: SKILL.md asks to compress the folder and move originals to the recycle bin but no code is provided. Confirm who performs these steps (the agent or user) and add code or clear instructions. - Clarify metadata source and network needs: the skill says it will 'query' book metadata but doesn't list the API or data source. Confirm how metadata is obtained and whether any credentials or scraping will be used. If you plan to run this skill, request the author to address the above items or run it in a controlled environment (with safe, writable test folder) and review logs and produced files. Because of the mismatches and missing pieces, I mark the package as suspicious rather than benign; these are likely bugs but leave the skill unreliable and potentially risky if it writes to unexpected locations.

Generate Reading Activities

功能说明

根据用户提供的书名，生成详细介绍、每日打卡内容、问答题库。

• 详细介绍：记录书籍的作者、出版日期、ISBN、推荐语、详细介绍、目录，
• 每日打卡内容：根据书籍目录平均生成7天打卡计划

触发场景

• 用户说：“帮我生成一个《只有我一个人觉得特好笑吗？》的读书活动”
• 用户说：“根据《只有我一个人觉得特好笑吗？》生成一个读书活动”
• 用户说：“生成一个读书活动，只有我一个人觉得特好笑吗”

调用逻辑

1.从用户消息中获取书名; 2.查询书名是否有名称相同但不同出版社或不同出版日期的书籍; 3.获取书籍作者、出版日期、出版社、ISBN、推荐语、详细介绍、目录，生成详细介绍。 - 文件名称：E:\Temp\ReadingActivities\yyyymmddhhMMss_书名\详细介绍.md - 格式要求：包含以下字段，书名、作者、出版日期、出版社、ISBN、推荐语、详细介绍、目录。 4.根据目录、章节数，生成7天阅读打卡计划表，要求7天内完成整书阅读。使用excelUtils方法保存 - 文件名称：E:\Temp\ReadingActivities\yyyymmddhhMMss_书名\阅读打卡.xls， - 格式要求：包含以下字段，天数、打卡内容、章节名称和页码。 5.根据书籍内容生成50道问答题目，包含单选和多选题。使用excelUtils方法保存 - 文件名称：E:\Temp\ReadingActivities\yyyymmddhhMMss_书名\问答题库.xls - 格式要求：包含以下字段，题目名称、题目类型(0代表单选题、1代表多选题）、正确选项的序号（多个用逗号分割）,用数字表示、答案解析、题目选项1、题目选项2、题目选项3、题目选项4、题目选项5、题目选项6、题目选项7、题目选项8、题目选项9、题目选项10 - 当生成的题目不足50道时多次生成，需要去除重复的题目。 6.对新建的文件夹进行压缩处理，保存为yyyymmddhhMMss_书名.zip文件，将原文件放入回收站。

excelUtils方法说明

• 代码路径：scripts/excelUtils.py
• 依赖库：pandas、openpyxl
• 核心函数：def export(filePath, data)
• 参数说明：
  • filePath：保存文件路径，如 E:\Temp\ReadingActivities\text.xls
  • data：需要保存的数据，如 {'Name': ['Alice', 'Bob'], 'Age': [25, 30]}

边缘场景

• 未能找到书籍（如只有我一个人觉得你好看吗）：回复“未能找到相关书籍，请确认书籍名称是否正确”；
• 找到多本名称相同但不同出版社或不同出版日期的书籍（如毛泽东语录）：回复“找到多本同名数据，请明确出版社和出版日期”；
• 如果书籍有多本或多辑（如习近平用典（第一辑）、习近平用典（第二辑））：回复“找到书籍有多本或者多册，请确认是否合并生成”；
• 如无法创建文件夹（如G:\Temp\ReadingActivities）：回复“无法生成文件夹G:\Temp\ReadingActivities，请确认路径或者权限是否正确”；