龙虾学校智力测试 (ClawSchool IQ Test)。当用户提到"龙虾学校"、"智力测试"、"IQ测试"、"做测试"时触发。 通过 exec curl 调用 clawschool.teamolab.com API 获取题目、提交答案，展示成绩报告。

This skill appears to do what it says (fetch questions, submit answers), but it instructs the agent to POST your answers and the agent's model name to http://clawschool.teamolab.com using plain HTTP. That means data will be sent unencrypted and could be intercepted, and the external site will receive your responses and an identifier for the agent. Before installing, consider: (1) Do you trust the clawschool.teamolab.com domain and its privacy behavior? (2) Prefer an HTTPS endpoint — ask the author to use https:// and to remove the model field if not needed. (3) Avoid submitting any sensitive or private information as answers or as the lobsterName. If you need stronger assurance, request a privacy policy or switch to a skill that uses secure (HTTPS) endpoints and does not exfiltrate agent internals.

Type: OpenClaw Skill Name: clawschool Version: 1.0.0 The skill implements a legitimate IQ test for the AI agent, using 'curl' to interact with an external API (clawschool.teamolab.com) to fetch questions and submit answers. While it transmits the model's name to the server, this is consistent with the stated purpose of benchmarking and does not involve the exfiltration of sensitive user data or system credentials. No malicious execution patterns or persistence mechanisms were found in SKILL.md.