📦 Xuexitong Homework Submit — 学习通作业自动提交
v1.1.2学习通/超星作业自动化脚本：自动扫描作业、抓取题目模板、暂存答案并一键交卷，支持手写图片答案流水线处理，大幅提升在线作业效率。
2· 544·1 当前·1 累计
by 下载技能包
最后更新
2026/4/22
安全扫描
OpenClaw
安全
high confidenceNULL
评估建议
This skill appears coherent with its stated purpose, but review these points before installing/using it:
- Authentication: the scripts require a Chaoxing session cookie file (default ~/.openclaw/credentials/xuexitong_cookie.txt). That file effectively grants access to your account — only use a cookie from an account you trust (consider a throwaway/test account).
- HandWrite dependency: rendering handwritten PNGs depends on a local HandWrite project and its virtualenv (.venv). The skill will ca...详细分析 ▾
✓ 用途与能力
Name/description match the implementation: scripts list tasks, resolve doHomeWork URLs, fetch questions, produce templates, handle temp-save/submit, render handwritten PNGs and upload them. No unexplained credentials or unrelated services are requested.
ℹ 指令范围
Runtime instructions are concrete and limited to the stated purpose (running the included scripts). They require a Chaoxing cookie file (~/.openclaw/credentials/xuexitong_cookie.txt by default) and a local HandWrite environment for handwriting rendering; the SKILL.md mentions HandWrite but does not fully document the need to have the HandWrite project and its .venv in the expected location. Scripts also call GitHub for update checks and post images to Chaoxing's upload endpoint.
✓ 安装机制
No install spec is provided (instruction-only install), and there is a small requirements.txt (requests). This is low-risk; the code runs locally and uses subprocess to invoke a HandWrite venv and the included Python scripts. Nothing is downloaded from arbitrary URLs during install.
ℹ 凭证需求
The skill does not request environment variables but reads a local cookie file containing Chaoxing session cookies (sensitive). That is reasonable for automating web actions on the user’s account, but users should understand the cookie grants account-level access. No other unrelated credentials are requested.
✓ 持久化与权限
always:false and the skill does not request to be force-included. It performs no privileged system-wide changes and does not modify other skills' configuration. It does perform outgoing network calls (Chaoxing endpoints and GitHub) as expected for its purpose.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.1.22026/2/22
NULL
● 可疑
安装命令
点击复制官方npx clawhub@latest install xuexitong-homework-submit
镜像加速npx clawhub@latest install xuexitong-homework-submit --registry https://cn.longxiaskill.com