📦 SIGAA — 巴西教务系统接口
v1.1.0连接巴西50余所联邦大学（如巴西利亚大学UNB）使用的SIGAA教务系统，提供课程查询、成绩获取、课表同步等自动化操作，让师生无需手动登录网页即可完成学术管理。
0· 291·0 当前·0 累计
by 下载技能包
最后更新
2026/3/2
安全扫描
OpenClaw
安全
high confidenceThe skill's code, instructions, and required environment variables are consistent with its stated purpose of authenticated web-scraping automation for SIGAA; nothing in the bundle requests unrelated credentials or installs arbitrary remote code.
评估建议
This skill appears coherent for automating SIGAA portal tasks, but giving any third-party skill your institutional credentials carries risk. Before installing or running it: (1) verify the source/repository URL (SKILL.md references a GitHub repo; confirm it matches an author you trust), (2) review the included scripts locally (they are small and readable) and run them on a machine you control, (3) prefer using a dedicated account or rotating password for automation if your institution allows it,...详细分析 ▾
✓ 用途与能力
Name/description match the requested binaries (curl, python3, grep) and the three environment variables (SIGAA_URL, SIGAA_USER, SIGAA_PASSWORD). The included scripts implement login and portal scraping as described.
✓ 指令范围
SKILL.md and scripts restrict actions to SIGAA and the CAS SSO host discovered during login. Scripts only read declared env vars, create a local cookie file, perform HTTP GET/POST against SIGAA endpoints, parse HTML, and unset the password after login. No instructions to read unrelated files or exfiltrate data to third-party endpoints.
✓ 安装机制
No install spec (instruction-only with bundled scripts) — nothing is downloaded from external URLs or written to system paths beyond a temporary cookie file. This is the lowest-risk install pattern.
✓ 凭证需求
Only the SIGAA URL and the account credentials are requested, which is proportionate to the stated purpose. The scripts unset SIGAA_PASSWORD after login and limit network targets to SIGAA and derived CAS host.
✓ 持久化与权限
The skill does not request persistent/system-wide presence, always is false, and it does not modify other skills or global agent configuration.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.1.02026/3/2
Security hardening: credentials via env vars only (no CLI args), cookie files chmod 600 + auto-deleted on exit, password unset after login, rate limiting, declared required binaries (curl, python3, grep)
● 无害
安装命令
点击复制官方npx clawhub@latest install sigaa
镜像加速npx clawhub@latest install sigaa --registry https://cn.longxiaskill.com