← 返回 Skills 市场
123
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install pku-info-common
功能描述
Shared library crate (info-common) providing IAAA authentication, OTP, session persistence, credential resolution, and QR rendering for PKU CLI tools. Use th...
安全使用建议
This SKILL.md appears to document a legitimate PKU auth helper, but it references sensitive resources (OS keyring, ~/.config/info/<tool>/session.json and cookies.json, and env vars like PKU_PASSWORD / PKU_SMS_CODE) while the skill metadata declares none of those requirements and provides no source or homepage. Before installing: 1) ask the publisher for the source repository or a copy of the crate code so you can verify it does not exfiltrate secrets; 2) confirm whether your agent/runtime will allow the skill to access the OS keyring and ~/.config paths — if so, consider restricting or auditing those accesses; 3) do not set PKU_PASSWORD or PKU_SMS_CODE environment variables in a global context until you trust the code; 4) prefer an explicitly-declared, signed release (or a vendor with a homepage) over an anonymous instruction-only skill. If the maintainer provides the crate source and explicit required-env/config declarations that match the SKILL.md, my confidence in a benign assessment would increase.
功能分析
Type: OpenClaw Skill
Name: pku-info-common
Version: 1.0.0
The skill bundle describes a shared authentication library (info-common) for Peking University (PKU) CLI tools, handling IAAA SSO, TOTP, and session management. It follows security best practices by utilizing OS-level keyrings (via the 'keyring' crate) for credential storage, explicitly instructing AI agents never to pass passwords as CLI arguments, and storing sessions locally in ~/.config/info/, with no evidence of malicious data exfiltration or unauthorized execution.
能力标签
能力评估
Purpose & Capability
The name and description (shared auth/session/OTP/QR helper for PKU CLI tools) match the SKILL.md content: it documents iaaa, otp, session, credential resolution, and qr modules and how consumers should integrate. The capabilities described are coherent for a shared auth crate.
Instruction Scope
The runtime instructions tell agents to use keyring-backed credential resolution, read/write session files under ~/.config/info/<name>/ (session.json, cookies.json), and to set environment variables (PKU_SMS_CODE) for SMS flow. The skill also tells agents to run consumer CLI commands (info-auth check, <tool> login -p). These instructions go beyond mere documentation — they describe accessing local secrets and on-disk session state, but the skill metadata does not declare those accesses.
Install Mechanism
No install spec or code is included; the skill is instruction-only, so there is no installer that would write or execute code on disk. This is lower installation risk but also means you cannot inspect code until a code release/source is provided.
Credentials
The SKILL.md references environment variables PKU_USERNAME, PKU_PASSWORD, PKU_SMS_CODE and describes using OS keyring backends and session files, but the skill metadata lists no required env vars, no primary credential, and no required config paths. That mismatch is important: the instructions expect access to secrets (env vars, keyring, session files) but the declared requirements do not disclose or justify that access. Requiring or instructing use of SMS codes and keyring is plausible for an auth helper, but it should be declared explicitly and the source reviewed before granting access.
Persistence & Privilege
The skill is not always-enabled and does not request persistent elevated platform privileges. It does instruct use of local session storage and keyring, but it does not itself request to persist in agent configuration or modify other skills. No 'always: true' or other high-privilege flags are present.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install pku-info-common - 安装完成后，直接呼叫该 Skill 的名称或使用
/pku-info-common触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
info-common 2.0.0 is a major update to the shared PKU authentication library crate, featuring restructured modules and enhanced credential management:
- Provides unified IAAA authentication, TOTP/OTP, session & cookie storage, OS keyring credential resolution, and terminal QR rendering for CLI tools (treehole, course, campuscard, elective, info-auth).
- Introduces detailed credential resolution priority: keyring, environment variables, then interactive entry, with passwords never stored on disk.
- Expands session persistence with error context and structured storage under `~/.config/info/<name>/`.
- All user-facing strings are now in Chinese and error handling improved.
- Adds comprehensive guidelines for building and integrating new CLI tools with shared authentication logic.
元数据
常见问题
PKU Info Common 是什么？
Shared library crate (info-common) providing IAAA authentication, OTP, session persistence, credential resolution, and QR rendering for PKU CLI tools. Use th... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 123 次。
如何安装 PKU Info Common？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install pku-info-common」即可一键安装，无需额外配置。
PKU Info Common 是免费的吗？
是的，PKU Info Common 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
PKU Info Common 支持哪些平台？
PKU Info Common 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 PKU Info Common？
由 wjsoj（@wjsoj）开发并维护，当前版本 v1.0.0。
推荐 Skills