← 返回 Skills 市场
Trivia Quiz
作者
bytesagain-lab
· GitHub ↗
· v2.0.1
· MIT-0
501
总下载
0
收藏
3
当前安装
14
版本数
在 OpenClaw 中安装
/install trivia-quiz
功能描述
Play knowledge quizzes with facts, categories, and daily challenges. Use when learning topics, drilling flashcards, reviewing answers, tracking progress.
安全使用建议
This skill appears to do what it claims: a local trivia/flashcard CLI that writes history and note logs to ~/.local/share/trivia-quiz/ (or $TRIVIA_QUIZ_DIR if you set it). Before installing/running: 1) Note that scripts/trivia.sh calls python3 — ensure you have Python 3 installed (SKILL.md omitted this). 2) If you want privacy, set TRIVIA_QUIZ_DIR to a directory you control and check file permissions: history.log and data.log are plaintext. 3) Review the two scripts (they are short and readable) or run them in a restricted environment if you prefer. 4) No network access or credentials are used by the skill, so there is no hidden exfiltration in the provided code.
功能分析
Type: OpenClaw Skill
Name: trivia-quiz
Version: 2.0.1
The skill bundle contains a shell injection vulnerability in 'scripts/trivia.sh' due to an unquoted variable '$INPUT' being passed directly to a python3 command line. This allows for arbitrary command execution if a user or agent provides input containing shell metacharacters (e.g., 'play 5; touch /tmp/pwned'). While the primary logic in 'scripts/script.sh' and the instructions in 'SKILL.md' appear benign and aligned with the stated purpose of a study assistant, this vulnerability represents a significant security risk.
能力评估
Purpose & Capability
Name/description describe a local trivia/learning tool and the provided scripts implement that functionality. One inconsistency: SKILL.md lists Bash ≥4 and coreutils but does not mention Python 3, yet scripts/trivia.sh invokes python3. Other than that, required files and behavior (local data storage under TRIVIA_QUIZ_DIR) align with the stated purpose.
Instruction Scope
Runtime instructions and examples map to the shipped scripts. The SKILL.md and scripts only read/write files under the skill data directory (default ~/.local/share/trivia-quiz/), use standard utilities (date, wc), and print content; they do not reference unrelated system paths, credentials, or external endpoints. No network calls or unexpected data transmission are present.
Install Mechanism
No install spec (instruction-only) is present, which keeps the installation surface minimal. Code files are included in the package but there is no download-from-URL or archive extraction step. This is low-risk from an install mechanism perspective.
Credentials
The skill requires no credentials or special environment variables. It optionally respects TRIVIA_QUIZ_DIR and XDG_DATA_HOME/HOME for data location. There are no secret-like environment variables requested, nor access to unrelated configs.
Persistence & Privilege
always is false and the skill does not modify other skills or system-wide settings. It creates and writes to its own data directory (history.log and data.log) in the user's home area, which is expected for an app that stores notes and history.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install trivia-quiz - 安装完成后，直接呼叫该 Skill 的名称或使用
/trivia-quiz触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v2.0.1
update
v2.0.0
v2.5 standard: Use-when desc, homepage, source, security fix
v2.3.6
retry-fix-token
v2.3.5
yaml-fix+quality
v2.3.4
Quality upgrade
v2.3.3
Quality upgrade: custom functionality
v2.3.2
De-template, unique content, script cleanup
v2.3.1
Quality improvement: better docs, examples, cleaner text
v2.3.0
Quality fixes: removed third-party references, aligned docs with implementation
v2.2.0
Enhanced descriptions for better AI triggering
v2.1.0
Enhanced descriptions for better AI triggering
v1.0.2
Runtime fix
v1.0.1
Add runtime declaration + security compliance
v1.0.0
Initial release of Trivia Quiz.
- Offers random trivia, category-based questions, hard challenges, fun facts, and a daily quiz.
- Fully supports both English and Chinese, with localized content.
- Provides tailored output for various trivia scenarios.
- Multiple commands available to cover a complete trivia workflow.
元数据
常见问题
Trivia Quiz 是什么？
Play knowledge quizzes with facts, categories, and daily challenges. Use when learning topics, drilling flashcards, reviewing answers, tracking progress. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 501 次。
如何安装 Trivia Quiz？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install trivia-quiz」即可一键安装，无需额外配置。
Trivia Quiz 是免费的吗？
是的，Trivia Quiz 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Trivia Quiz 支持哪些平台？
Trivia Quiz 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Trivia Quiz？
由 bytesagain-lab（@bytesagain-lab）开发并维护，当前版本 v2.0.1。
推荐 Skills