📦 Chaoxing Download — 超星PDF下载
v1.3.0一键将超星（chaoxing.com）竞赛/课程平台的PDF文档下载并转换为TXT，支持contestyd.chaoxing.com等地址，方便离线阅读与文本处理。
1· 100·0 当前·0 累计
by 下载技能包
最后更新
2026/4/7
安全扫描
OpenClaw
安全
medium confidenceNULL
评估建议
This skill appears to do what it claims: call Chaoxing's public getYunFiles endpoint, download PDFs, and convert them to text. Before using it: 1) Confirm you are allowed to download the documents (copyright/terms). 2) Run pip installs inside a virtualenv (pymupdf and rapidocr-onnxruntime) to limit system impact. 3) Be aware rapidocr-onnxruntime may download OCR models or perform additional network requests — check its docs. 4) The skill writes files to ~/Downloads/chaoxing_pdfs; validate filena...详细分析 ▾
✓ 用途与能力
Name/description (download Chaoxing viewer PDFs and convert to text) directly match the SKILL.md: it extracts objectid, calls the documented getYunFiles endpoint, downloads data.pdf, validates page count, and converts to TXT. There are no unrelated credentials, binaries, or config paths requested.
ℹ 指令范围
Instructions stay within the stated purpose (parsing URLs/objectid, calling contestyd.chaoxing.com, downloading PDFs, extracting text and OCR). They instruct writing files to ~/Downloads/chaoxing_pdfs and installing Python packages. The SKILL.md also includes a Windows example path (C:/Users/Cameron/...) which appears to be an author/example artifact and not required. Note: the OCR package may download additional models at runtime, which causes extra network activity beyond the described API calls.
ℹ 安装机制
The skill is instruction-only (no install spec), so nothing is installed by the platform. However the runtime instructions tell users to run pip install pymupdf rapidocr-onnxruntime. Installing third-party Python packages is within scope but carries the usual risks (supply-chain issues, additional runtime model or asset downloads). No arbitrary download URLs or archives are present in the skill itself.
✓ 凭证需求
No environment variables, credentials, or protected config paths are requested. The skill writes output to the user's Downloads directory (expected for a downloader). The Windows path shown is just an example and not a declared requirement.
✓ 持久化与权限
No persistent/always-on flag set; the skill is user-invocable and does not request elevated or cross-skill configuration changes. It does write files to the user's Downloads directory as part of normal operation.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.3.02026/4/6
NULL
● 可疑
安装命令
点击复制官方npx clawhub@latest install chaoxing-download
镜像加速npx clawhub@latest install chaoxing-download --registry https://cn.longxiaskill.com