Moji Vocab

Moji辞書生词本管理与每日测试技能。支持读取日语收藏夹、按时间排序（早期单词优先）、混合模式出题（释义+读音）、删除已掌握单词。

Before using/installing: 1) The scripts require MOJI_TOKEN and MOJI_DEVICE_ID (session credentials) despite the registry saying none — these are sensitive and grant read/delete access to your Moji account; only provide them if you trust the source. 2) SKILL.md mentions an automatic daily send and a scripts/moji_early_quiz.py file that are not present; the code does not implement scheduling — do not assume automated behavior exists. 3) The README asks to install requests, but the code uses urllib (requests is unused) — dependency declaration is sloppy. 4) Prefer running the scripts locally and in dry-run mode (delete operations support dry_run) and verify API calls (inspect network traffic) before giving the token to any automated agent. 5) If you need scheduling/automation, set up your own scheduler (cron/task scheduler) rather than trusting an unverified skill to run autonomously. 6) If uncertain about origin, avoid using real account credentials — consider a secondary Moji account to test.

Type: OpenClaw Skill Name: xiaolongxia-moji-vocab Version: 1.0.0 The skill bundle provides legitimate functionality for managing MojiDict (Japanese dictionary) vocabulary and generating quizzes. It interacts with the official MojiDict API (api.mojidict.com) using user-provided credentials (sessionToken and deviceId) passed via environment variables. The Python scripts (moji_manager.py and moji_quiz.py) perform standard data fetching and deletion operations as described in the documentation, with no evidence of data exfiltration to third-party domains, malicious execution, or harmful prompt injection.