OSNK Trainer

Pelatih OSNK - Bank soal OSK/OSNK/SNK/Bebras (2006-2025) dengan latihan cerdas, speed run, performance tracking, dan mentoring lengkap.

This package appears to be a legitimate offline OSNK/Bébras question trainer with local markdown banks and local JSON state — but before installing or enabling autonomous invocation you should: 1) Inspect run.sh yourself (open the file) to confirm it contains only safe parsing, file reads/writes, and at most harmless HTTPS GETs to the documented GitHub raw URL; look specifically for no eval/exec of downloaded content, no use of curl/wget|--output to execute archives, and no exfiltration logic. 2) If you cannot review the script, run the skill in an isolated sandbox or VM and monitor network traffic and filesystem writes. 3) If you allow the GitHub fallback, verify the exact repository URL (raw.githubusercontent.com/jrrqd/osnk-question-bank) and ensure you trust that upstream content; consider blocking network access if you want fully local-only operation. 4) Check that writing to $OPENCLAW_WORKSPACE/memory (or ./memory) fits your privacy requirements and that you are comfortable storing practice data locally. 5) Because source/homepage are unknown, prefer manual review and sandboxing; if you need higher assurance, ask the author for the run.sh source (or for a signed release) and verify it matches the packaged script.

Type: OpenClaw Skill Name: osnk-trainer Version: 1.0.8 The skill bundle is a legitimate educational tool designed for training students for the Indonesian Informatics Olympiad (OSNK). The main execution script, `run.sh`, functions as a command router that retrieves competition questions from local markdown files or a specific GitHub repository (github.com/jrrqd/osnk-question-bank) and manages user statistics in local JSON files. While the script uses `curl` to fetch remote content, it treats the data as text for display purposes and does not employ dangerous patterns like `eval` or piping remote content to a shell. No evidence of prompt injection, data exfiltration, or malicious persistence was found across the documentation or the extensive question bank files.