OpenClaw Teaching
v1.0.0OpenClaw 知识教学技能 - 用于持续更新和管理 OpenClaw 平台知识，支持将知识内容导出为 PPT 或 Word 文档。适用场景：OpenClaw 平台使用教程、技能开发指南、最佳实践分享、知识库维护与更新。
⭐ 0· 303·4 current·4 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The skill's name, README, SKILL.md and included scripts align: they manage a local knowledge base and generate PPT/Word docs. However, the SKILL.md claims features like '自动同步: 与官方文档保持同步' (auto-sync with official docs) but I see no network sync or API code in the provided scripts to implement that. This is a functional mismatch (feature claim without implementation), not evidence of maliciousness.
Instruction Scope
Runtime instructions tell the agent to run the included scripts which operate on the supplied KNOWLEDGE_BASE.md, save outputs to user-specified paths and create backups in a local backups directory. The scripts read and write local files (expected). They do not request environment variables or contact external endpoints in the visible code. One code-line inserts a parent-relative path onto sys.path (sys.path.insert(... / 'docx' / 'scripts')), which is unusual and could cause Python to import code from a path outside the skill if that path resolves externally; it warrants review but is not necessarily malicious.
Install Mechanism
No install spec is present and this is effectively an instruction + script-only skill. Nothing is downloaded or extracted during install, which minimizes install-time risk. The scripts require standard Python packages (python-docx, python-pptx) but those are declared only in docs.
Credentials
The skill does not declare or require any environment variables, credentials, or external config paths. The operations shown (file parsing, backup creation, file output) are proportional to the skill's stated purpose.
Persistence & Privilege
'always' is false and the skill does not request persistent platform-wide privileges. The scripts create backups and modify the local KNOWLEDGE_BASE.md (expected behavior) but do not modify other skills or system-wide agent settings in the visible code.
Assessment
This skill looks like a straightforward local knowledge-manager + document generator. Before installing: 1) Review the sys.path insertion in scripts/generate_docs.py — ensure it doesn't point to unexpected host paths in your environment. 2) Note that 'auto-sync with official docs' is advertised but no network sync code is present; if you need that feature, ask the maintainer for details. 3) Run the scripts in a safe/test environment first to confirm file output/backups go where you expect. 4) Ensure Python dependencies (python-docx, python-pptx, markdown) are installed from trusted sources. 5) Only proceed if you trust the skill's source (owner unknown) and are comfortable with it modifying the local KNOWLEDGE_BASE.md file and creating backups.Like a lobster shell, security has layers — review code before you run it.
latestvk97ce7qxs3cj0y8zzwa75zys4182p6t9
License
MIT-0
Free to use, modify, and redistribute. No attribution required.