← 返回 Skills 市场

Ultimate Flashcards and Podcast Tutor

Name: Ultimate Flashcards and Podcast Tutor
Author: drgeld

作者 drgeld · GitHub ↗ · v1.0.4

cross-platform ⚠ suspicious

1783

总下载

当前安装

版本数

在 OpenClaw 中安装

/install echodecks-ultimate

功能描述

AI-powered flashcard management with automated podcast generation and spaced-repetition study tools.

使用说明 (SKILL.md)

EchoDecks Skill (v1)

Integrates with EchoDecks for flashcard management, study sessions, and AI generation.

Configuration

This skill requires the ECHODECKS_API_KEY environment variable to be set.

Tools

`echodecks_get_decks`

List all available decks or details for a specific deck.

id (optional): The ID of a specific deck to retrieve.

`echodecks_get_due_cards`

Retrieve cards that are currently due for review.

deck_id (optional): Filter due cards by a specific deck ID.

`echodecks_submit_review`

Submit a spaced repetition review for a card.

card_id (required): The ID of the card being reviewed.
quality (required): Integer rating (0-3).
- 0: Again (Failure/Forgot)
- 1: Hard
- 2: Good
- 3: Easy

`echodecks_generate_cards`

Generate new flashcards from a topic or text content using AI.

deck_id (required): The target deck ID for the new cards.
topic (optional): A short topic string to generate from.
text (optional): Raw text content to generate from. Note: One of topic or text must be provided. Cost: 10 credits.

`echodecks_generate_podcast`

Generate an audio podcast summary or conversation from a deck.

deck_id (required): The source deck ID.
voice (optional): Voice preference (default: "neutral").
type (optional): "summary" or "conversation" (default: "summary"). Note: Cost: 50 credits.

`echodecks_get_podcasts`

Retrieve existing podcasts for a deck.

deck_id (optional): Filter by deck ID.
id (optional): specific podcast ID.

`echodecks_get_user_stats`

Get current user profile and study statistics.

Implementation Details

All tools are wrappers around skills/echodecks-v1/echodecks_client.py.

# Example
./skills/echodecks-v1/echodecks_client.py get-due --deck-id 123

安全使用建议

Key issues to resolve before installing: - Confirm the required environment variable: SKILL.md and the code expect ECHODECKS_API_KEY, but the registry metadata claims none — don't provide secrets until this is fixed or clarified. - Ask the author to explain the domain discrepancy: README links to echodecks.app while the client posts to echodecks.com; confirm the official API endpoint and that keys are sent only to the legitimate service. - Tests, SKILL.md, and code disagree on parameter names and payload formats (e.g., card_id vs cardId, style vs voice/type) and on the exact base URL (tests expect a different path). These look like copy-paste or versioning bugs — request an updated, consistent set of files or run the tests locally in a safe environment to validate behavior. - If you must test the skill, do so with a scoped/test API key (not a high-privilege personal key), monitor network requests, and review responses to ensure the key is only used for EchoDecks. - Prefer skills from known publishers or with a clear homepage and contact info; this skill's source/homepage are unknown, which reduces trust. If the author cannot clarify these inconsistencies, treat the package as untrusted.

功能分析

Type: OpenClaw Skill Name: echodecks-ultimate Version: 1.0.4 The skill bundle is benign. All files consistently demonstrate a clear and legitimate purpose: interacting with the EchoDecks API for flashcard and podcast management. The `echodecks_client.py` script securely retrieves the `ECHODECKS_API_KEY` environment variable and directs all network requests exclusively to `https://echodecks.com`, which aligns with the skill's stated purpose. There is no evidence of data exfiltration, malicious command execution, persistence mechanisms, or prompt injection attempts against the AI agent in `SKILL.md` or `README.md`.

能力评估

⚠ Purpose & Capability

The advertised purpose (flashcard management and podcast generation via EchoDecks) matches the included client code and README, but there are surprising mismatches: the registry metadata at the top says "Required env vars: none" while SKILL.md and the code require ECHODECKS_API_KEY. The README links to echodecks.app while the client uses a BASE_URL on echodecks.com — the dual domains are inconsistent and should be explained.

ℹ Instruction Scope

SKILL.md limits runtime behavior to EchoDecks API operations and declares a single required env var (ECHODECKS_API_KEY). The implementation similarly only reads that env var and performs HTTP calls. There are no instructions to read arbitrary files or other credentials. However, the SKILL.md metadata (requires envs) is present inside the file while the registry metadata omitted it — that mismatch could lead to the agent not prompting the user for the API key.

✓ Install Mechanism

This is instruction-only with no install spec, and included code files are plain Python. No downloads, package installs, or extraction steps are present, so install risk is low.

⚠ Credentials

Only one credential (ECHODECKS_API_KEY) is used in code and SKILL.md, which is proportionate to an API client. But the registry metadata omitted required envs while SKILL.md and code require ECHODECKS_API_KEY — this inconsistency could cause accidental omission of the API key or confusion for users. Verify which manifest is authoritative before providing secrets.

✓ Persistence & Privilege

The skill does not request always:true, does not modify other skills or system settings, and does not persist new credentials. Autonomous invocation is allowed (platform default) but is not combined with other high-risk flags here.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install echodecks-ultimate
安装完成后，直接呼叫该 Skill 的名称或使用 /echodecks-ultimate 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v1.0.4

Improved README with use cases and example prompts

v1.0.3

Added metadata description to SKILL.md

v1.0.1

Added README.md

v1.0.0

Initial publish under new name

元数据

Slug echodecks-ultimate

版本 1.0.4

许可证 —

累计安装 0

当前安装数 0

历史版本数 4

常见问题