← 返回 Skills 市场

English-Learning

Name: English-Learning
Author: leiwonginchaozhou-netizen

作者 leiwonginchaozhou-netizen · GitHub ↗ · v1.0.0 · MIT-0

cross-platform ⚠ suspicious

134

总下载

当前安装

版本数

在 OpenClaw 中安装

/install english-learning

功能描述

提供小学、专四、专八英语听力材料，支持获取材料列表和详细段落。

使用说明 (SKILL.md)

\r \r

英语听力训练助手\r

\r 当用户需要听力训练时，按以下步骤操作。\r \r

1. 获取训练类别\r

目前支持三种类别：\r

小学 → 代码 primary\r
专四 → 代码 tem4\r
专八 → 代码 tem8\r \r 用户可以说：“小学英语听力”、“专四材料”、“给我专八练习”等。\r \r

2. 根据类别获取材料列表\r

\r 调用 API（将 {category} 替换为对应代码）：\r \r

GET ${SUPABASE_URL}/rest/v1/listening_materials?is_active=eq.true&training_category=eq.{category}&select=id,title,description,difficulty,audio_url,duration,listening_text_segments(id,text_content,start_time,end_time,sequence_order,audio_url)\r
\r
请求头：\r
apikey: ${SUPABASE_ANON_KEY}\r
Authorization: Bearer ${SUPABASE_ANON_KEY}\r
\r
展示材料列表\r
将返回的结果格式化为清晰列表，例如：\r
📚 【小学英语听力材料】\r
1. 我的学校 (难度：初级)\r
2. 春天的故事 (难度：中级)\r
...\r
请回复序号选择材料，或直接说出材料名称。\r
\r
展示具体材料内容\r
当用户选择材料后，从之前获取的数据中提取 listening_text_segments，按 sequence_order 顺序展示每个段落。如果材料有总音频链接，也可以提供播放链接。\r
\r
安装说明\r
在 OpenClaw 中设置以下环境变量（必须）：\r
\r
SUPABASE_URL：你的项目 API 地址\r
示例：https://fhpyglovinmpqsnhqqay.supabase.co\r
\r
SUPABASE_ANON_KEY：你的 anon key\r
示例：eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJzdXBhYmFzZSIsInJlZiI6ImZocHlnbG92aW5tcHFzbmhxcWF5Iiwicm9sZSI6ImFub24iLCJpYXQiOjE3NjczODE1OTIsImV4cCI6MjA4Mjk1NzU5Mn0.q7go9R7Kcc-J4xobxmvQ_OQe6PfZ5VtKOzEdqQpPnYU

安全使用建议

Before installing: 1) Confirm with the skill author (or avoid installing if author unknown) whether SUPABASE_URL and SUPABASE_ANON_KEY are actually required and update the registry metadata to list them. 2) Do not paste production or high-privilege keys into the skill — prefer a read-only or tightly-scoped key and enable Row-Level Security (RLS) on the Supabase table. 3) Treat the example SUPABASE_URL and anon key in SKILL.md as suspicious: verify whether that example key is valid; if it is, it should be revoked. 4) If you must use this skill, create a dedicated Supabase project or a scoped public key that only exposes the listening_materials view, not other data. 5) Prefer a documented homepage/source and contact for the owner; absence of a source makes auditing harder. 6) If you need higher assurance, request the skill author to remove embedded keys, declare required env vars in registry metadata, and publish a source or homepage so the implementation can be reviewed.

功能分析

Type: OpenClaw Skill Name: english-learning Version: 1.0.0 The skill is designed to provide English listening materials by fetching data from a Supabase backend. It uses standard HTTP GET requests to retrieve content categories and segments, with no evidence of malicious execution, data exfiltration, or harmful prompt injection. The instructions in SKILL.md are consistent with the stated purpose of English language training.

能力评估

ℹ Purpose & Capability

The skill claims to serve English listening materials and its runtime instructions call a Supabase REST endpoint to list materials — that is coherent. However, the registry metadata indicates no required environment variables while the SKILL.md explicitly lists SUPABASE_URL and SUPABASE_ANON_KEY, which is an inconsistency between metadata and the instructions.

⚠ Instruction Scope

The instructions are specific and scoped to retrieving listening_materials from a Supabase REST API and presenting segments; they do not ask the agent to read arbitrary system files. Concern: the SKILL.md contains a concrete example SUPABASE_URL and what appears to be a real-looking SUPABASE_ANON_KEY (a JWT-like string). Including an example key in the skill text is risky — if that key is valid it could be abused; if it's a placeholder it should be clearly marked as such.

✓ Install Mechanism

This is an instruction-only skill with no install spec or code files, so nothing will be written to disk by an installer. That minimizes install-time risk.

⚠ Credentials

Requesting SUPABASE_URL and SUPABASE_ANON_KEY is proportionate for a skill that fetches content from a Supabase project. However, the registry metadata declares no required env vars (mismatch), and the presence of an example anon key in the documentation raises the risk of accidental credential reuse or exposure. Note: Supabase anon keys are intended for public/client usage but may still allow unwanted read access depending on your RLS policies.

✓ Persistence & Privilege

The skill does not request always:true and has no install-time persistence steps. It is user-invocable and may be invoked autonomously by the agent (platform default), which is expected for typical skills.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install english-learning
安装完成后，直接呼叫该 Skill 的名称或使用 /english-learning 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v1.0.0

This is the first version, a test

元数据

Slug english-learning

版本 1.0.0

许可证 MIT-0

累计安装 1

当前安装数 1

历史版本数 1

常见问题