knowledge-digest
v1.0.0将学习资料（PDF/教材/话题）转换为个性化、多模态的学习材料：手写笔记PDF、极简交互测验HTML、幻灯片PDF+PPTX、思维导图、音频课程。触发词：知识消化、学习材料、笔记生成、测验、幻灯片、思维导图、音频课程、课件、教材转换
⭐ 1· 157·3 current·3 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
medium confidencePurpose & Capability
The skill's name/description align with the instructions: it processes uploaded PDFs or a user-provided topic and produces notes, quizzes, slides, mindmaps and audio. It does not request unrelated credentials or config paths. One minor gap: the SKILL.md assumes the ability to generate and compile images, MP3 and PPTX but does not declare required binaries or services (e.g., image model, TTS, PDF/PPTX generator). This is plausibly platform-provided but is underspecified.
Instruction Scope
Instructions remain within the claimed scope (parse content, extract structure, generate specified artifacts). However the document references functions/tools by name (gen_images, edit_images) and compilation steps (compile to PDF/PPTX, produce MP3) without specifying how these should be executed or what external endpoints/APIs/binaries are used. Also the ‘help me search and generate’ fallback allows the agent to fetch web content — expected for the task, but it broadens the attack surface and privacy considerations.
Install Mechanism
There is no install spec and no code files — instruction-only skills have minimal disk footprint and no automatic downloads. This is low risk from an install point of view.
Credentials
The skill requests no environment variables, credentials, or config paths, which is proportionate for the declared functionality. Note that generating audio, PPTX or invoking external image models might normally require service keys or binaries; none are requested here, so confirm where generation will run and whether keys are needed at runtime.
Persistence & Privilege
The skill is not always-included and does not request elevated persistence or modifications to other skills. Autonomous invocation is allowed (platform default) but that is not combined with other privileged or broad credential access.
Assessment
Before installing: 1) Confirm the host platform provides the toolchain the skill implicitly needs (image generation/editing, TTS for MP3, PDF→PPTX compilation) or whether you'll need to supply API keys/binaries. 2) Ask the skill author to clarify what gen_images/edit_images calls map to and how PPTX/mp3 are produced (local binaries vs external APIs). 3) Consider privacy: if you ask the skill to "search and generate", it may fetch external web content — avoid uploading sensitive student materials unless you know where outputs and source files are stored. 4) Request example output files (a sample notes PDF, quiz HTML, and one slide deck) to validate formatting constraints (colors, interactivity, no inline previews). 5) If you require offline or on-prem generation for compliance, verify the runtime environment can perform image/audio/PPTX generation without sending data to third-party services.Like a lobster shell, security has layers — review code before you run it.
latestvk978byeqqvhb40ace05gd3h4z183n4ae
License
MIT-0
Free to use, modify, and redistribute. No attribution required.