SIGAA

Interact with SIGAA (Sistema Integrado de Gestão de Atividades Acadêmicas), the academic management system used by 50+ Brazilian federal universities (UNB, U...

This skill appears to do what it says, but review and run carefully: 1) Inspect scripts before sourcing them (sourcing executes code in your shell and installs an EXIT trap). 2) Use a dedicated institution account (not an admin) and verify SIGAA_URL is the official site for your university. 3) If you prefer not to modify your interactive shell, run the commands in a disposable shell/container or adapt the login script to produce credentials for a subprocess instead of sourcing. 4) Confirm network targets after the first login (the script follows CAS redirects) and avoid running on a machine that carries other high-value credentials. 5) If you need stronger isolation, run these scripts inside a temporary VM or container.

Type: OpenClaw Skill Name: sigaa Version: 1.1.2 The sigaa skill bundle is a well-documented tool for interacting with the Brazilian SIGAA academic system. The scripts (sigaa_login.sh, sigaa_student.sh, sigaa_professor.sh) use curl and Python to perform authenticated web scraping. The implementation follows security best practices, such as using environment variables for credentials, setting restricted permissions (chmod 600) on temporary session cookie files, using shell traps for automatic cleanup, and unsetting sensitive variables after use. No evidence of data exfiltration, malicious execution, or prompt injection was found; the logic is entirely consistent with the stated purpose of academic management automation.