← 返回 Skills 市场
1559
总下载
3
收藏
2
当前安装
7
版本数
在 OpenClaw 中安装
/install wilma
功能描述
Access Finland's Wilma school system from AI agents. Fetch schedules, homework, exams, grades, messages, and news via the wilma CLI. Start with `wilma summar...
安全使用建议
This skill is coherent: it wraps a Wilma CLI and expects a local Wilma config that stores session tokens/TOTP secrets. Before installing: (1) verify the npm package and linked GitHub repo (ensure @wilm-ai/wilma-cli is the legitimate project), (2) be aware the CLI stores session credentials and (optionally) TOTP secrets in ~/.config/wilmai/config.json — inspect that file and its permissions, (3) avoid passing TOTP secrets on the command line when possible (use interactive save or other secure storage) because command-line arguments can be exposed in process listings and shell history, (4) note the small metadata inconsistency about required config paths in the registry vs SKILL.md and confirm the agent/runtime will allow use of the local config, and (5) if you need stronger isolation, test the npm package in a sandbox before granting the agent access to real student accounts.
功能分析
Type: OpenClaw Skill
Name: wilma
Version: 1.4.1
The Wilma skill is a legitimate integration for the Finnish school information system, providing a wrapper for the '@wilm-ai/wilma-cli' NPM package. It facilitates access to schedules, grades, and messages using a local configuration file (~/.config/wilmai/config.json) and standard CLI commands. No evidence of data exfiltration, malicious execution, or harmful prompt injection was found in SKILL.md or the scripts/wilma-cli.sh wrapper.
能力评估
Purpose & Capability
Name/description match the requested binaries and install: the skill requires the 'wilma' CLI (provided by npm package @wilm-ai/wilma-cli) and relies on a local Wilma config containing session credentials. These requirements are appropriate for a Wilma integration. Note: registry metadata at the top of the report lists no required config paths, but the SKILL.md declares ~/.config/wilmai/config.json as required — this is an inconsistency in metadata but not a functional mismatch with the skill's purpose.
Instruction Scope
The SKILL.md instructs the agent to run the wilma/wilmai CLI in non-interactive mode and to prefer --json output. It also documents use of a local config file and optional --totp-secret (TOTP secret) on the command line and recommends saving the TOTP secret in the local config via interactive setup. These instructions remain within scope for reading Wilma data, but they imply the agent (via the CLI) will access stored session credentials/TOTP secrets — a sensitive capability that users should be aware of. The SKILL.md does not instruct the agent to read arbitrary system files beyond the Wilma config or to transmit data to unexpected endpoints.
Install Mechanism
Install is an npm global package (@wilm-ai/wilma-cli) which produces the declared 'wilma' binary. This is proportionate for a CLI wrapper. Installing from npm is a moderate-risk action (code executed from registry); user should verify the package and its source (SKILL.md links a GitHub repo and wilm.ai site). The included wrapper script is straightforward and not malicious.
Credentials
The skill declares no environment variables and no remote credentials, which is consistent. However, the workflow requires a local config (~/.config/wilmai/config.json) that stores session credentials and possibly a saved TOTP secret; those are sensitive. The SKILL.md also suggests passing a TOTP secret on the command line (one-off), which exposes the secret to process lists and shell history — a security caveat but within the expected needs of MFA support.
Persistence & Privilege
The skill does not request always:true and is user-invocable only. It does not modify other skills or claim system-wide configuration changes. Its install writes a CLI binary (via npm) which is normal for a CLI integration.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install wilma - 安装完成后，直接呼叫该 Skill 的名称或使用
/wilma触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.4.1
Add MFA (TOTP) support for Wilma accounts with persistent secret storage
v1.3.0
Add --date and --weekday flags for schedule lookup (supports Finnish short forms: ma, ti, ke, to, pe)
v1.2.0
Wilma Skill 1.2.0 adds formalized metadata for platform compatibility.
- Added _meta.json file for skill metadata.
- Enhanced SKILL.md with a new "metadata" section describing required local config files, dependencies, install instructions, and authentication notes.
- No breaking changes to CLI usage or core documentation.
v1.1.1
Remove outdated OpenAI agent yaml
v1.1.0
Add summary, schedule, homework, grades commands. Powered by the Wilma /overview endpoint.
v1.0.1
Add GitHub and website links
v1.0.0
Finnish school system (Wilma) CLI skill — fetch messages, news, exams for AI agents
元数据
常见问题
Wilma 是什么？
Access Finland's Wilma school system from AI agents. Fetch schedules, homework, exams, grades, messages, and news via the wilma CLI. Start with `wilma summar... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 1559 次。
如何安装 Wilma？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install wilma」即可一键安装，无需额外配置。
Wilma 是免费的吗？
是的，Wilma 完全免费（开源免费），可自由下载、安装和使用。
Wilma 支持哪些平台？
Wilma 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Wilma？
由 aikarjal（@aikarjal）开发并维护，当前版本 v1.4.1。
推荐 Skills