English-Learning

提供小学、专四、专八英语听力材料，支持获取材料列表和详细段落。

Security Scan

The skill's behavior (fetching content from a Supabase instance) generally fits its purpose, but the SKILL.md requires Supabase credentials that are not declared in the registry metadata and even embeds an example SUPABASE_URL and SUPABASE_ANON_KEY-like string — an inconsistency and potential credential exposure that you should verify before installing.

Purpose & Capability

The skill claims to serve English listening materials and its runtime instructions call a Supabase REST endpoint to list materials — that is coherent. However, the registry metadata indicates no required environment variables while the SKILL.md explicitly lists SUPABASE_URL and SUPABASE_ANON_KEY, which is an inconsistency between metadata and the instructions.

Instruction Scope

The instructions are specific and scoped to retrieving listening_materials from a Supabase REST API and presenting segments; they do not ask the agent to read arbitrary system files. Concern: the SKILL.md contains a concrete example SUPABASE_URL and what appears to be a real-looking SUPABASE_ANON_KEY (a JWT-like string). Including an example key in the skill text is risky — if that key is valid it could be abused; if it's a placeholder it should be clearly marked as such.

Install Mechanism

This is an instruction-only skill with no install spec or code files, so nothing will be written to disk by an installer. That minimizes install-time risk.

Credentials

Requesting SUPABASE_URL and SUPABASE_ANON_KEY is proportionate for a skill that fetches content from a Supabase project. However, the registry metadata declares no required env vars (mismatch), and the presence of an example anon key in the documentation raises the risk of accidental credential reuse or exposure. Note: Supabase anon keys are intended for public/client usage but may still allow unwanted read access depending on your RLS policies.

Persistence & Privilege

The skill does not request always:true and has no install-time persistence steps. It is user-invocable and may be invoked autonomously by the agent (platform default), which is expected for typical skills.

What to consider before installing

Before installing: 1) Confirm with the skill author (or avoid installing if author unknown) whether SUPABASE_URL and SUPABASE_ANON_KEY are actually required and update the registry metadata to list them. 2) Do not paste production or high-privilege keys into the skill — prefer a read-only or tightly-scoped key and enable Row-Level Security (RLS) on the Supabase table. 3) Treat the example SUPABASE_URL and anon key in SKILL.md as suspicious: verify whether that example key is valid; if it is, it should be revoked. 4) If you must use this skill, create a dedicated Supabase project or a scoped public key that only exposes the listening_materials view, not other data. 5) Prefer a documented homepage/source and contact for the owner; absence of a source makes auditing harder. 6) If you need higher assurance, request the skill author to remove embedded keys, declare required env vars in registry metadata, and publish a source or homepage so the implementation can be reviewed.

英语听力训练助手

当用户需要听力训练时，按以下步骤操作。

1. 获取训练类别

目前支持三种类别：

• 小学 → 代码 primary
• 专四 → 代码 tem4
• 专八 → 代码 tem8

用户可以说：“小学英语听力”、“专四材料”、“给我专八练习”等。

2. 根据类别获取材料列表

调用 API（将 {category} 替换为对应代码）：

GET ${SUPABASE_URL}/rest/v1/listening_materials?is_active=eq.true&training_category=eq.{category}&select=id,title,description,difficulty,audio_url,duration,listening_text_segments(id,text_content,start_time,end_time,sequence_order,audio_url)

请求头：
apikey: ${SUPABASE_ANON_KEY}
Authorization: Bearer ${SUPABASE_ANON_KEY}

展示材料列表
将返回的结果格式化为清晰列表，例如：
📚 【小学英语听力材料】
1. 我的学校 (难度：初级)
2. 春天的故事 (难度：中级)
...
请回复序号选择材料，或直接说出材料名称。

展示具体材料内容
当用户选择材料后，从之前获取的数据中提取 listening_text_segments，按 sequence_order 顺序展示每个段落。如果材料有总音频链接，也可以提供播放链接。

安装说明
在 OpenClaw 中设置以下环境变量（必须）：

SUPABASE_URL：你的项目 API 地址
示例：https://fhpyglovinmpqsnhqqay.supabase.co

SUPABASE_ANON_KEY：你的 anon key
示例：eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZiI6ImZocHlnbG92aW5tcHFzbmhxcWF5Iiwicm9sZSI6ImFub24iLCJpYXQiOjE3NjczODE1OTIsImV4cCI6MjA4Mjk1NzU5Mn0.q7go9R7Kcc-J4xobxmvQ_OQe6PfZ5VtKOzEdqQpPnYU