← Back to Skills Marketplace
149
Downloads
0
Stars
0
Active Installs
2
Versions
Install in OpenClaw
/install pku-treehole
Description
PKU Treehole (北大树洞) anonymous forum CLI tool built in Rust. Use this skill when working on the treehole crate, debugging treehole commands, adding features t...
Usage Guidance
This skill appears to be a helper for the Treehole CLI, but its runtime instructions expect access to local credentials (OS keyring), a PKU_SMS_CODE env var, and session files even though the skill metadata declares none. Before installing or enabling it: 1) confirm the skill's source and inspect the actual code or repo (the package lists no homepage/source). 2) Do not set PKU_SMS_CODE as a persistent global environment variable; prefer ephemeral use if you must test. 3) Be cautious about allowing any agent to read your OS keyring or session files — run in a sandboxed account or VM if possible. 4) Verify how session tokens are stored and how to revoke them (or delete ~/.config/info/treehole/) after use. 5) If you rely on this for course/schedule answers, consider cross-checking with other official sources. If the publisher can provide the crate repository or a signed release, that would materially increase confidence.
Capability Analysis
Type: OpenClaw Skill
Name: pku-treehole
Version: 1.1.0
The skill provides a CLI interface for the PKU Treehole platform with high-risk capabilities, including SSO login handling, grade retrieval (`score`), and TOTP 2FA management (`otp` command). The `SKILL.md` instructions include steering logic that explicitly directs the AI agent to prioritize this tool over others (e.g., Blackboard or elective crates) for schedule-related queries. While these features are consistent with a comprehensive campus utility, the management of authentication secrets and academic records within an agent-accessible skill presents a significant risk for unauthorized access to sensitive PII.
Capability Assessment
Purpose & Capability
Name/description and the SKILL.md consistently describe a PKU Treehole CLI helper; that purpose is coherent. However, the manifest declares no required env vars or config paths while the SKILL.md explicitly documents reading credentials from the OS keyring, an env var (PKU_SMS_CODE), and persisting sessions to ~/.config/info/treehole/. The absence of those declared requirements is an inconsistency.
Instruction Scope
The SKILL.md instructs agents to perform auth flows (IAAA SSO, JWT callback), auto-login using credentials from the OS keyring or env, and to persist/read session data from a home-directory path. Those are legitimate for a CLI client, but they involve accessing sensitive local secrets (keyring, session tokens) and an SMS code env var; the skill instructions therefore reach beyond purely read-only help text and could cause the agent to use or transmit secrets.
Install Mechanism
This is an instruction-only skill with no install spec and no code files, so nothing is written to disk by an installer step — lowest install risk.
Credentials
Although the manifest lists no required environment variables or config paths, the SKILL.md expects PKU_SMS_CODE and credential resolution from the OS keyring (and fallback to env). Requesting or using those secrets is reasonable for login functionality, but the skill should have declared them. The undeclared access to keyring/session files reduces transparency and is disproportionate to what the metadata advertises.
Persistence & Privilege
The CLI persists session state to ~/.config/info/treehole/ (JWT/session tokens) per the docs. That behavior is expected for a CLI client and the skill is not configured as always:true. Still, persisted tokens are sensitive — verify how they are stored and how to revoke them if needed.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install pku-treehole - After installation, invoke the skill by name or use
/pku-treehole - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.1.0
更新 description 路由规则：课表/schedule/academic-cal 统一走 treehole
v1.0.0
- Major release: Complete overhaul of the PKU Treehole CLI tool architecture and documentation.
- Introduced a detailed SKILL.md describing CLI commands, authentication flows, API endpoints, and key source files.
- Modernized authentication with IAAA SSO login, JWT callback, and optional SMS verification.
- Expanded and clarified available CLI commands and their functions.
- Improved guidance for AI agent auto-login and non-interactive SMS verification via environment variables.
- Outlined clear development and error-handling conventions for contributors.
Metadata
Frequently Asked Questions
What is Treehole?
PKU Treehole (北大树洞) anonymous forum CLI tool built in Rust. Use this skill when working on the treehole crate, debugging treehole commands, adding features t... It is an AI Agent Skill for Claude Code / OpenClaw, with 149 downloads so far.
How do I install Treehole?
Run "/install pku-treehole" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Treehole free?
Yes, Treehole is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Treehole support?
Treehole is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Treehole?
It is built and maintained by wjsoj (@wjsoj); the current version is v1.1.0.
More Skills