Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

OSNK Trainer

v1.0.8

Pelatih OSNK - Bank soal OSK/OSNK/SNK/Bebras (2006-2025) dengan latihan cerdas, speed run, performance tracking, dan mentoring lengkap.

0· 133·0 current·0 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for jrrqd/osnk-trainer.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "OSNK Trainer" (jrrqd/osnk-trainer) from ClawHub.
Skill page: https://clawhub.ai/jrrqd/osnk-trainer
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install osnk-trainer

ClawHub CLI

Package manager switcher

npx clawhub@latest install osnk-trainer
Security Scan
Capability signals
Crypto
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
The name/description (OSNK trainer) match the packaged content: many local .md question banks, a simple bash runtime, and JSON state files. There are no declared env vars, binaries, or unrelated credentials requested, which is proportional to an offline quiz trainer.
!
Instruction Scope
SKILL.md describes only local operations (reading .md files, writing JSON into memory/) which is consistent — but it also documents an optional GitHub fallback (raw.githubusercontent.com) used when local files are missing. The provided package includes a SECURITY.md that describes run.sh behavior, but the actual run.sh source was not included in the review text here (only its presence/size is listed). Because the runtime behavior (parsing commands, fetching fallbacks) is implemented by run.sh, not seeing its contents prevents verification that it truly never executes arbitrary code, never uses eval, and only performs safe GET requests.
Install Mechanism
There is no install spec (instruction-only skill plus an included run.sh). That is low-risk compared to remote installers. No archives or third-party package installs are declared. However, the included executable script (run.sh) would be executed at runtime — its contents should be reviewed before running.
Credentials
The skill declares no required env vars or credentials and stores data under $OPENCLAW_WORKSPACE/memory or ./memory — this is proportional. Note: SKILL.md/SECURITY.md reference $OPENCLAW_WORKSPACE and an optional outbound HTTPS fallback to raw.githubusercontent.com/jrrqd/osnk-question-bank; network access is reasonable for a fallback but it is an external endpoint and should be trusted/verified before allowing the skill to fetch from it.
Persistence & Privilege
always is false and the skill stores only JSON under the workspace memory directory. It does not request system-wide privileges. SECURITY.md mentions no sudo or system modifications. There is a minor oddity: SECURITY.md points to a local path under a developer's home and an npm-global path which suggests typical dev install locations, but not elevated privileges.
What to consider before installing
This package appears to be a legitimate offline OSNK/Bébras question trainer with local markdown banks and local JSON state — but before installing or enabling autonomous invocation you should: 1) Inspect run.sh yourself (open the file) to confirm it contains only safe parsing, file reads/writes, and at most harmless HTTPS GETs to the documented GitHub raw URL; look specifically for no eval/exec of downloaded content, no use of curl/wget|--output to execute archives, and no exfiltration logic. 2) If you cannot review the script, run the skill in an isolated sandbox or VM and monitor network traffic and filesystem writes. 3) If you allow the GitHub fallback, verify the exact repository URL (raw.githubusercontent.com/jrrqd/osnk-question-bank) and ensure you trust that upstream content; consider blocking network access if you want fully local-only operation. 4) Check that writing to $OPENCLAW_WORKSPACE/memory (or ./memory) fits your privacy requirements and that you are comfortable storing practice data locally. 5) Because source/homepage are unknown, prefer manual review and sandboxing; if you need higher assurance, ask the author for the run.sh source (or for a signed release) and verify it matches the packaged script.

Like a lobster shell, security has layers — review code before you run it.

latestvk97esjmt6myd47fpyst5prk77x849vvr
133downloads
0stars
9versions
Updated 3w ago
v1.0.8
MIT-0

OSNK Trainer Skill

Skill OpenClaw untuk latihan olimpiade komputer OSNK (Olimpiade Sains Nasional Kompetisi) Informatika dengan fitur pelatihan cerdas.

Fitur

Latihan Soal

Dapatkan soal acak dari bank soal dengan berbagai topik dan tingkat kesulitan:

openclaw, beri saya 5 soal acak
openclaw, 10 soal teori graf
openclaw, tampilkan soal kombinatorika
openclaw, 5 soal DP dari OSNK 2023

Speed Run Training

Sesi latihan dengan waktu untuk meningkatkan kecepatan dan akurasi:

openclaw, mulai speed run 30 menit
openclaw, 20 menit speed run soal PG
openclaw, 45 menit speed run soal essay

Scoring:

  • Pilihan Ganda: +4 benar, -1 salah, 0 kosong
  • Essay: Cek jawaban manual

Performance Tracking

Lacak progres danidentifikasi area lemah:

openclaw, tampilkan statistik saya
openclaw, laporan performa saya
openclaw, topik apa yang lemah?
openclaw, tampilkan kemajuan

Metrik yang dilacak:

  • Total soal yangdicoba
  • Akurasi per kategori
  • Waktu per soal
  • Trend peningkatan
  • Topik kuat/lemah

Mentoring

Penjelasan dan coaching:

openclaw, jelaskan dynamic programming
openclaw, apa itu BFS dan DFS?
openclaw, beri hint untuk soal nomor 3
openclaw, rekomendasi apa yang harus dipelajari

Kategori yang Didukung

  • Computational Thinking (Bebas-style)
  • Dynamic Programming (DP)
  • Teori Graf (BFS, DFS, MST, Shortest Path)
  • Kombinatorika (Permutasi, Kombinasi)
  • Teori Bilangan (Prima, Modular, GCD/LCM)
  • Aljabar Boolean (Gerbang logika, Peta Karnaugh)
  • Analisis Algoritma (Big O, Kompleksitas)
  • Struktur Data (Array, Tree, Heap)

Bank Soal

Bank soal berasal dari kompetisi OSK/OSNK asli:

  • OSK 2006-2019 (Olimpiade Sains Tingkat Kabupaten/Kota) - ✅ Baru! Update April 2026
  • OSNK/SNK 2022-2025 (Tingkat Provinsi, full database lengkap)
  • KSNK 2020-2021 (Sistem baru pandemi)
  • Bebras Indonesia & International

Total: 780+ soal dengan kunci jawaban dan verifikasi

Sumber soal:

  • OSK: Bank soal dari TLX TOKI (tlx.toki.id)
  • Bebras: Berbagai sumber publik internet

🤝 Kolaborasi & Update

bergabunglah! Jika Anda menemukan jawaban yang salah atau ingin menambahkan soal baru, fork repo ini dan buat pull request. Dengan bersama-sama memeriksa dan memperbarui, kita dapat membuat resource yang lebih akurat dan berguna bagi semua peserta olimpiade komputer Indonesia.

⚠️ Catatan Penting: Kunci Jawaban

Perhatian: Kunci jawaban yang tersedia di bank soal belum tentu 100% benar. Beberapa jawaban mungkin salah atau berbeda dengan kunci resmi.

Disarankan: Untuk memastikan kebenaran, selalu cocokkan dengan:

  • Kunci jawaban resmi dari TLX TOKI
  • Pembahasan dari forum olimpiade
  • Rujukan lain yang terpercaya

Penggunaan skill ini sebagai latihan, tetapi validasi jawaban tetap menjadi tanggung jawab pengguna.

Penyimpanan Data

Semua data pengguna disimpan secara lokal di workspace Anda:

  • Progres: memory/osnk-progress.json
  • Statistik: memory/osnk-stats.json
  • Konfigurasi: memory/osnk-config.json

Tidak ada informasi pribadi yang dikumpulkan. Semua data bersifat anonim.

🔒 Keamanan & Transparansi (April 2026)

Skill ini mencakup dokumen keamanan lengkap SECURITY.md yang menjelaskan fungsi shell script run.sh:

Apa yang run.sh lakukan:

  • Command routing bash sederhana untuk parsing perintah natural language
  • Mengambil soal dari file markdown lokal atau GitHub fallback (opsional)
  • Menyimpan statistik performa ke JSON di workspace user

Yang TIDAK dilakukan:

  • ❌ Tidak mengeksekusi kode arbitrer
  • ❌ Tidak mendownload executable pihak ketiga
  • ❌ Tidak mengirim data keluar tanpa izin explisit
  • ❌ Tidak memodifikasi sistem files diluar workspace

Untuk detail teknis lengkap, baca: SECURITY.md

Contoh Penggunaan

Memulai

openclaw, mulai pelatihan
openclaw, beri saya 5 soal pemanasan

Latihan Topik Tertentu

openclaw, soal tentang rekursi
openclaw, beri saya soal greedy algorithm
openclaw, tampilkan soal graph traversal

Simulasi Kompetisi

openclaw, simulasi OSK 2024
openclaw, full 50 soal latihan

Review Kesalahan

openclaw, tampilkan jawaban salah saya
openclaw, review soal nomor 10

Detail Teknis

  • Bahasa: Bash
  • Dependencies: Tidak ada (bash murni)
  • Penyimpanan: File JSON di direktori memory
  • API: Tidak diperlukan (bank soal offline)
  • Path: Menggunakan $OPENCLAW_WORKSPACE/memory jika tersedia, atau fallback ke ./memory

Catatan Path: Script menggunakan path dinamis untuk kompatibilitas dengan OpenClaw environment. Jika tidak tersedia, akan fallback ke direktori lokal ./memory.

Privasi

  • Tidak memerlukan akun pengguna
  • Tidak ada data dikirim keluar
  • Semua progres disimpan secara lokal
  • Pelacakan hanya anonim

Lisensi

MIT

Kredit

  • Developer: suluhadi
  • Email: suluhadi@gmail.com
  • Bank Soal OSK: TLX TOKI (tofi.or.id)
  • Soal Bebras: Berbagai sumber publik internet

Comments

Loading comments...