← 返回 Skills 市场
openlesson
作者
uncertainsystems
· GitHub ↗
· v1.0.2
618
总下载
2
收藏
0
当前安装
3
版本数
在 OpenClaw 中安装
/install open-lesson
功能描述
Interact with the openLesson tutoring API to generate learning plans, start audio-based sessions, analyze reasoning gaps, and manage tutoring workflows.
安全使用建议
This skill appears coherent and only needs a single OPENLESSON_API_KEY. Before installing: verify you trust the openlesson.academy domain (there is no homepage/source listed in the metadata), because the agent will send user audio to that external service; avoid sending highly sensitive audio through the skill; use a dedicated API key you can revoke; confirm the URL used is exactly https://www.openlesson.academy (the SKILL.md warns redirects can strip the Authorization header); and, if you prefer tighter control, disable autonomous invocation or limit the skill's use to explicit (user-invoked) actions.
功能分析
Type: OpenClaw Skill
Name: open-lesson
Version: 1.0.2
The skill is classified as suspicious due to a prompt injection risk identified in `skill.md`. The documentation explicitly states under 'Credentials' that the skill 'does NOT create actual calendar events' and that 'Reminders' are 'behavioral, not a technical integration.' However, under 'Tips for Agents,' it directly instructs the AI agent to 'Create calendar events or reminders for each session.' This contradiction could lead the agent to attempt to create calendar events using other tools or APIs it might have access to, potentially exceeding the intended scope of this skill or performing unauthorized actions, even though the skill itself lacks the technical capability for calendar integration.
能力评估
Purpose & Capability
Name/description (audio tutoring, plans, session analysis) align with the declared requirement (OPENLESSON_API_KEY) and the endpoints/instructions in SKILL.md. Nothing in the skill asks for unrelated credentials or system access.
Instruction Scope
SKILL.md instructs the agent to construct JSON/curl POSTs and to base64-encode audio chunks before POSTing to the analyze endpoint; it explicitly warns against sending text to the analyze endpoint and against using a browser tool. This is within scope, but note that the agent will transmit user audio (potentially sensitive) to an external API (https://www.openlesson.academy). The skill does not instruct reading local files or unrelated env vars.
Install Mechanism
Instruction-only skill with no install spec and no bundled code — minimal risk from installation. All runtime actions rely on standard shell tools (curl) presumed present.
Credentials
Only a single environment variable is required (OPENLESSON_API_KEY), which is appropriate for an API-binding skill. No other secrets or config paths are requested.
Persistence & Privilege
The skill does not request permanent presence (always:false), stores session IDs only in-memory for the conversation, and does not modify other skills or system-wide settings. Autonomous invocation remains enabled by platform default (normal).
如何使用
- 确保已安装 OpenClaw(本地或 Docker 部署)
- 在对话框中输入安装命令:
/install open-lesson - 安装完成后,直接呼叫该 Skill 的名称或使用
/open-lesson触发 - 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.2
- Corrected all bash and curl examples to use https://www.openlesson.academy for API calls and the OPENLESSON_API_KEY environment variable for authentication.
- Removed references to localhost URLs and hardcoded API keys from command patterns.
- No technical or functional changes to endpoints or workflow. Documentation and usage instructions improved for accuracy and security.
v1.0.1
**Added environment variable credential support for openLesson API key.**
- Introduced a `requires.env` file to clarify the need for setting `OPENLESSON_API_KEY`.
- Updated documentation to explain how to supply the API key using environment variables.
- Clarified that calendar access is not needed — reminders are agent notifications, not integrations.
- Documented session ID in-memory storage (no persistent storage).
- Streamlined and expanded endpoint and workflow documentation for clarity.
v1.0.0
- Initial release of the open-lesson skill for OpenClaw integration.
- Enables agents to generate learning plans, start tutoring sessions, analyze audio input for reasoning gaps, and manage session lifecycle via API.
- Provides complete Bash command patterns for all API endpoints—no browser tool needed, uses only shell tools like curl.
- Strictly enforces audio-only input (webm, mp4, ogg formats) for analysis; text input is rejected.
- Highlights best practices for API use, error handling, and session management, including automated session scheduling and reminders.
元数据
常见问题
openlesson 是什么?
Interact with the openLesson tutoring API to generate learning plans, start audio-based sessions, analyze reasoning gaps, and manage tutoring workflows. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 618 次。
如何安装 openlesson?
在 OpenClaw 或 Claude Code 对话框中运行命令「/install open-lesson」即可一键安装,无需额外配置。
openlesson 是免费的吗?
是的,openlesson 完全免费(开源免费),可自由下载、安装和使用。
openlesson 支持哪些平台?
openlesson 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。
谁开发了 openlesson?
由 uncertainsystems(@dncolomer)开发并维护,当前版本 v1.0.2。
推荐 Skills