📦 Tronclass
v1.0.0使用此技能与 TronClass 学习管理系统交互（目前针对 FJU 优化）。当用户询问与其课程相关的内容时，随时可用。
0· 18·0 当前·0 累计
by 下载技能包
最后更新
2026/4/19
安全扫描
OpenClaw
安全
medium confidence该技能内部与 TronClass 的 CLI 封装保持一致：使用 tronclass-cli npm 包进行指令，会话保存在 ~/.tronclass-cli/ 目录下，并执行 LMS 操作；主要风险是 npm 依赖未签名/来源不明（无安装元数据/主页），请在安装前验证该包。
评估建议
This skill appears to do what it says: it expects you to install a third‑party npm CLI that will store session data in ~/.tronclass-cli/ and save downloads to ~/Downloads/. Before installing or enabling the skill: 1) Verify the npm package (search npmjs.org for 'tronclass-cli'), inspect the package source/README and maintainer identity, and confirm the package owner matches what you trust; 2) Prefer installing in a sandbox/container or locally (not globally) to inspect behavior first; 3) Be awar...详细分析 ▾
✓ 用途与能力
Name/description match the instructions and reference docs: all commands and workflows relate to accessing TronClass courses, activities, downloads, and homework. The skill does not request unrelated credentials or access.
✓ 指令范围
SKILL.md restricts behavior to running the tronclass-cli commands (login, list, view, download, submit). It documents local session storage (~/.tronclass-cli/) and default download location (~/Downloads/) — both expected for a CLI LMS client. There are no instructions to read unrelated system files or exfiltrate data to non-TronClass endpoints.
ℹ 安装机制
There is no formal install spec in the registry data; SKILL.md tells users to run `npm install -g tronclass-cli`. Installing a third-party global npm package writes code to disk and can execute arbitrary actions. Additionally, the skill metadata lists 'Source: unknown' and no homepage, so the package origin can't be verified from the metadata — the user should inspect the npm package and its maintainer before installing.
✓ 凭证需求
The skill declares no required environment variables or credentials. It does store session cookies and config locally under ~/.tronclass-cli/ (config.json and cookies.json) as part of normal CLI auth flows; this is proportionate to an LMS client.
✓ 持久化与权限
always:false (no forced inclusion). The skill does not request persistent platform-level privileges or to modify other skills. The agent is allowed autonomous invocation by default, which is normal; combine that with the unknown-package note above when deciding whether to enable autonomous use.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/4/19
tronclass-cli 1.0.0 – 初始版本 - 推出用于与 TronClass LMS 交互的 CLI，针对 FJU 优化 - 支持标准及 FJU CAS 认证登录 - 可列出课程、活动、作业及待办任务 - 提供查看详情、下载文件、提交作业的命令 - 提供命令及子命令别名，使用更便捷 - 内置常用 LMS 任务的速查表与操作指南
● 无害
安装命令
点击复制官方npx clawhub@latest install tronclass-cli
镜像加速npx clawhub@latest install tronclass-cli --registry https://cn.longxiaskill.com
技能文档
|---|
| tronclass auth login [--fju] | 登录（交互） |
| tronclass auth check | 查看当前会话 |
| tronclass auth logout | 清除会话 |
| tronclass todo | 待办任务——首列为活动 ID |
| tronclass courses list [--all] [--raw] | 列出课程 |
| tronclass activities list | 列出课程活动 |
| tronclass activities view | 详情：元数据+描述+附件 |
| tronclass activities download [output] | 下载文件（默认 ~/Downloads/） |
| tronclass homework list | 列出课程作业 |
| tronclass homework submit | 提交作业文件 |
所有命令支持 --fields f1,f2,... 自定义列。
关键行为
tronclass todo —— 默认显示 id, course_name, title, end_time，id 可直接用于 activities view。
tronclass activities view —— 格式化表格，非原始 JSON。附件区给出 ref_id 与可直接运行的下载命令。
tronclass activities download —— 省略 output_file 时保存到 ~/Downloads/，使用服务器提供的文件名。 常用流程
查看待办： ``bash
tronclass todo
`
下载课程文件：
`bash
tronclass courses list # 获取 course_id
tronclass activities list # 获取 activity_id
tronclass activities view # 查看附件表 → 记录 ref_id
tronclass activities download # 自动保存到 ~/Downloads/
`
提交作业：
`bash
tronclass homework list # 找 activity_id
tronclass homework submit ./my_essay.pdf
` 参考文档
详细选项、字段及边界情况见：
references/auth.md—— 登录流程、会话管理references/todo.md—— 待办字段、过滤references/courses.md—— 课程字段、--raw标志references/activities.md—— 活动列表/查看/下载详解references/homework.md` —— 作业列表、提交选项、草稿模式