← Back to Skills Marketplace
shaike1

Webtop Galim

by shaike1 · GitHub ↗ · v0.1.2 · MIT-0
cross-platform ⚠ suspicious
108
Downloads
0
Stars
0
Active Installs
3
Versions
Install in OpenClaw
/install webtop-galim
Description
Check, monitor, and summarize student homework/tasks from Webtop (SmartSchool), Galim Pro, and Ofek. Use when the user asks to inspect homework, pending task...
Usage Guidance
This package contains working scrapers and a calendar-sync that match the description, but the registry metadata incorrectly says no environment or binaries are required. Practical points before installing or enabling: 1) The scripts require student portal usernames/passwords (GALIM_* and OFEK_*) and a Google service-account JSON (GOOGLE_SA_FILE) to sync calendars — treat these as highly sensitive and do not reuse high-privilege accounts. 2) The repo needs Python dependencies (Playwright and Google auth libraries) and a Playwright-capable environment; these are not declared in the registry. 3) The webtop fetch step references an external script path (/root/.openclaw/skills/pywebtop-skill/webtop_homework_fetcher.py) that is not bundled here — inspect that file before use. 4) The install.sh only creates an env template; there is no safe automated install from a trusted release host. 5) If you proceed: run the scripts in an isolated environment, create a dedicated, least-privilege Google service account scoped only to the calendar you intend, store child credentials securely (not in version control), prefer dry-run sync (--dry-run), and inspect all referenced external files. Because the package hides its true required credentials/deps in SKILL.md and code (not registry metadata) treat this as suspicious until you verify provenance and dependency/credential setup.
Capability Analysis
Type: OpenClaw Skill Name: webtop-galim Version: 0.1.2 The skill bundle is a legitimate automation toolkit for monitoring student homework and tasks from Israeli educational portals (Webtop, Galim Pro, and Ofek). It uses Playwright (in scripts/fetch_tasks.py and scripts/galim_fetch_tasks.py) to scrape task data and provides utilities to aggregate these into reports or sync them to a Google Calendar (scripts/sync_galim_calendar.py). While it handles sensitive student credentials, it does so via local environment files (.env) and lacks any indicators of data exfiltration, unauthorized remote execution, or malicious prompt injection.
Capability Assessment
Purpose & Capability
The scripts legitimately need student portal credentials and (for calendar sync) a Google service-account JSON to do what the description says. However the registry metadata claims 'Required env vars: none' and 'Required binaries: none' which is incorrect. The skill also calls an external webtop fetcher at /root/.openclaw/skills/pywebtop-skill/webtop_homework_fetcher.py (not included) — referencing another skill/repo outside the bundle. That discrepancy between declared requirements and actual needs is concerning.
Instruction Scope
SKILL.md and the wrapper instruct the agent to load environment files under /root/.openclaw/workspace/.env/*, run Playwright-based scrapers against Ministry of Education SSO portals, and optionally sync events to Google Calendar. The runtime instructions and scripts read student usernames/passwords, build OFEK_KIDS_JSON, and call Google Calendar APIs. They also rely on an external script path for Webtop. The instructions therefore access sensitive credentials and system paths not declared in the registry and reference files outside the package.
Install Mechanism
There is no declared install spec in registry (instruction-only), but the repo includes an install.sh that only creates an env template. The code relies on third-party Python packages (Playwright, google-auth, google.oauth2, etc.) and a Playwright-capable runtime, none of which are declared in registry install metadata. Also the Webtop fetcher is an external script path not bundled here — dependency on another local skill/repo increases risk/fragility.
Credentials
The code expects many sensitive environment values and files: student usernames/passwords for multiple children (GALIM_* and OFEK_*), OFEK_KIDS_JSON, GOOGLE_SA_FILE (service-account JSON), OFEK_GALIM_CALENDAR_ID, OFEK_GALIM_WHATSAPP_GROUP. The registry listed none. Requesting Ministry-of-Education student IDs & passwords and a Google service-account file is proportionate to the stated calendar-sync and scraping purpose, but the omission from metadata and the large number of secrets required (including a full Google SA JSON file) is a significant practical and security concern that should be explicit to users.
Persistence & Privilege
The skill is not always:true and does not request forced persistent installation. It does expect to read local env files and (for calendar sync) a local service-account JSON under ~/.openclaw/workspace/.secrets — these are local credentials with broad privileges if misconfigured. Autonomous invocation is allowed by default (platform default); combine that with the broad local credential usage and you should be cautious about enabling autonomous runs.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install webtop-galim
  3. After installation, invoke the skill by name or use /webtop-galim
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v0.1.2
Add detailed Ofek reporting (visible task title/subject/teacher/due-date sections), update docs/prompts, and keep Claude Code/local env support.
v0.1.1
Publish a smaller/minimized package to reduce false-positive risk: removes legacy probe/helper files and extra references while keeping core Webtop/Galim/Ofek + Claude Code support.
v0.1.0
Initial publish under the new webtop-galim slug. Includes Claude Code wrapper/docs/prompts, legacy env compatibility, and clean packaging.
Metadata
Slug webtop-galim
Version 0.1.2
License MIT-0
All-time Installs 0
Active Installs 0
Total Versions 3
Frequently Asked Questions

What is Webtop Galim?

Check, monitor, and summarize student homework/tasks from Webtop (SmartSchool), Galim Pro, and Ofek. Use when the user asks to inspect homework, pending task... It is an AI Agent Skill for Claude Code / OpenClaw, with 108 downloads so far.

How do I install Webtop Galim?

Run "/install webtop-galim" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Webtop Galim free?

Yes, Webtop Galim is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does Webtop Galim support?

Webtop Galim is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Webtop Galim?

It is built and maintained by shaike1 (@shaike1); the current version is v0.1.2.

💬 Comments