清华网络学堂自动化

自动登录清华网络学堂，查看待办事项，下载课件，提交作业，并批量标记课件已读，支持无人值守操作。

Key points to consider before installing or running this skill: - Sensitive data storage: The skill expects your Learn credentials and stores them in credentials.json in cleartext. If you provide your real student account, those credentials will exist on disk and could be read by other processes or backups. Consider using a dedicated/throwaway account instead of your primary account. - Persistent cookies & unattended access: The scripts persist session cookies, a browser Profile, and fingerprint info so the skill can operate without you. That gives long-lived access to your Learn account. If you stop trusting the skill, you must remove credentials.json, sessions/*.json, and the profiles/ directory to revoke access. - Mixed/absolute paths: Several scripts reference absolute Windows paths (C:\Users\TOM\..., D:\testclaw\...), while others use relative skill paths. This is a packaging bug but also a risk: data may be written to or read from unexpected locations. Before running, inspect and correct these paths so all state stays inside the skill folder (sessions/, profiles/). Grep for 'D:\' and 'C:\Users\TOM' and fix them. - Playwright download: Running the included install_playwright.py or the Playwright-based login scripts will download Chromium via Playwright. This is expected but will pull binaries from the internet. - SKILL.md vs code mismatch: The documentation claims the bot will create credentials.json automatically; in reality _config.load_credentials errors if the file is missing. You will likely need to create credentials.json manually or modify code to prompt securely. Practical steps: 1) Do not run this on a machine with sensitive data or on a production account. Prefer a VM/container or an isolated test account. 2) Inspect and (preferably) edit credentials.json handling: remove hardcoded paths, ensure the file lives under the skill directory, and consider encrypting the credentials if you must store them. 3) After any run, delete credentials.json, sessions/learn_session.json, profiles/learn_profile/ and any fingerprint files to revoke persistent access. 4) If you are not comfortable editing code, do not provide your primary account credentials—use a separate account. 5) If possible, prefer a supervised workflow (run login_supervised.py once interactively) and then delete credentials.json and profile data once session is established; or avoid unattended operation entirely. Because of the packaging inconsistencies and the risk of long-lived credential artifacts, treat this skill as suspicious until the absolute-path issues are resolved and credential handling is hardened.

Type: OpenClaw Skill Name: tsinghua-learn Version: 1.0.0 The skill bundle automates access to the Tsinghua University 'Learn' platform but exhibits several high-risk security practices. It explicitly instructs the AI agent to collect and store plaintext student credentials in 'credentials.json' and session tokens in 'learn_session.json'. Critically, 'learn_api.py' disables SSL certificate verification (verify=False), exposing users to man-in-the-middle (MITM) attacks. Additionally, multiple scripts (e.g., 'check_kj_unread.py', 'todos_dom.py', and '_config.py') contain hardcoded absolute file paths to a specific user's environment ('C:\Users\TOM\...' and 'D:\testclaw\...'), which is highly irregular for a portable skill and suggests it was extracted from a specific compromised or development machine.