← 返回 Skills 市场
108
总下载
0
收藏
0
当前安装
3
版本数
在 OpenClaw 中安装
/install webtop-galim
功能描述
Check, monitor, and summarize student homework/tasks from Webtop (SmartSchool), Galim Pro, and Ofek. Use when the user asks to inspect homework, pending task...
安全使用建议
This package contains working scrapers and a calendar-sync that match the description, but the registry metadata incorrectly says no environment or binaries are required. Practical points before installing or enabling: 1) The scripts require student portal usernames/passwords (GALIM_* and OFEK_*) and a Google service-account JSON (GOOGLE_SA_FILE) to sync calendars — treat these as highly sensitive and do not reuse high-privilege accounts. 2) The repo needs Python dependencies (Playwright and Google auth libraries) and a Playwright-capable environment; these are not declared in the registry. 3) The webtop fetch step references an external script path (/root/.openclaw/skills/pywebtop-skill/webtop_homework_fetcher.py) that is not bundled here — inspect that file before use. 4) The install.sh only creates an env template; there is no safe automated install from a trusted release host. 5) If you proceed: run the scripts in an isolated environment, create a dedicated, least-privilege Google service account scoped only to the calendar you intend, store child credentials securely (not in version control), prefer dry-run sync (--dry-run), and inspect all referenced external files. Because the package hides its true required credentials/deps in SKILL.md and code (not registry metadata) treat this as suspicious until you verify provenance and dependency/credential setup.
功能分析
Type: OpenClaw Skill
Name: webtop-galim
Version: 0.1.2
The skill bundle is a legitimate automation toolkit for monitoring student homework and tasks from Israeli educational portals (Webtop, Galim Pro, and Ofek). It uses Playwright (in scripts/fetch_tasks.py and scripts/galim_fetch_tasks.py) to scrape task data and provides utilities to aggregate these into reports or sync them to a Google Calendar (scripts/sync_galim_calendar.py). While it handles sensitive student credentials, it does so via local environment files (.env) and lacks any indicators of data exfiltration, unauthorized remote execution, or malicious prompt injection.
能力评估
Purpose & Capability
The scripts legitimately need student portal credentials and (for calendar sync) a Google service-account JSON to do what the description says. However the registry metadata claims 'Required env vars: none' and 'Required binaries: none' which is incorrect. The skill also calls an external webtop fetcher at /root/.openclaw/skills/pywebtop-skill/webtop_homework_fetcher.py (not included) — referencing another skill/repo outside the bundle. That discrepancy between declared requirements and actual needs is concerning.
Instruction Scope
SKILL.md and the wrapper instruct the agent to load environment files under /root/.openclaw/workspace/.env/*, run Playwright-based scrapers against Ministry of Education SSO portals, and optionally sync events to Google Calendar. The runtime instructions and scripts read student usernames/passwords, build OFEK_KIDS_JSON, and call Google Calendar APIs. They also rely on an external script path for Webtop. The instructions therefore access sensitive credentials and system paths not declared in the registry and reference files outside the package.
Install Mechanism
There is no declared install spec in registry (instruction-only), but the repo includes an install.sh that only creates an env template. The code relies on third-party Python packages (Playwright, google-auth, google.oauth2, etc.) and a Playwright-capable runtime, none of which are declared in registry install metadata. Also the Webtop fetcher is an external script path not bundled here — dependency on another local skill/repo increases risk/fragility.
Credentials
The code expects many sensitive environment values and files: student usernames/passwords for multiple children (GALIM_* and OFEK_*), OFEK_KIDS_JSON, GOOGLE_SA_FILE (service-account JSON), OFEK_GALIM_CALENDAR_ID, OFEK_GALIM_WHATSAPP_GROUP. The registry listed none. Requesting Ministry-of-Education student IDs & passwords and a Google service-account file is proportionate to the stated calendar-sync and scraping purpose, but the omission from metadata and the large number of secrets required (including a full Google SA JSON file) is a significant practical and security concern that should be explicit to users.
Persistence & Privilege
The skill is not always:true and does not request forced persistent installation. It does expect to read local env files and (for calendar sync) a local service-account JSON under ~/.openclaw/workspace/.secrets — these are local credentials with broad privileges if misconfigured. Autonomous invocation is allowed by default (platform default); combine that with the broad local credential usage and you should be cautious about enabling autonomous runs.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install webtop-galim - 安装完成后，直接呼叫该 Skill 的名称或使用
/webtop-galim触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v0.1.2
Add detailed Ofek reporting (visible task title/subject/teacher/due-date sections), update docs/prompts, and keep Claude Code/local env support.
v0.1.1
Publish a smaller/minimized package to reduce false-positive risk: removes legacy probe/helper files and extra references while keeping core Webtop/Galim/Ofek + Claude Code support.
v0.1.0
Initial publish under the new webtop-galim slug. Includes Claude Code wrapper/docs/prompts, legacy env compatibility, and clean packaging.
元数据
常见问题
Webtop Galim 是什么？
Check, monitor, and summarize student homework/tasks from Webtop (SmartSchool), Galim Pro, and Ofek. Use when the user asks to inspect homework, pending task... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 108 次。
如何安装 Webtop Galim？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install webtop-galim」即可一键安装，无需额外配置。
Webtop Galim 是免费的吗？
是的，Webtop Galim 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Webtop Galim 支持哪些平台？
Webtop Galim 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Webtop Galim？
由 shaike1（@shaike1）开发并维护，当前版本 v0.1.2。
推荐 Skills