查看学邦数据。用于登录学邦后台并读取首页今日经营数据与待办数据。

查看学邦数据。用于登录学邦后台并读取首页今日经营数据与待办数据。 Use this skill when the user wants to: - 查看学邦今日数据 - 查看学邦数据 - 学邦今日数据 - 学邦数据 - 查看校区今日经营数据 Triggers: 学邦, 今日数据，经营数据，待办数据，校区数据

This skill will ask you for your EDU.BOSS login and (by default) store the account and password in a local file (workspace/TOOLS.md) for reuse. The manifest does not declare that file path or any credential requirement, which is a mismatch you should question. Before installing or using: (1) Ask where 'workspace/TOOLS.md' is stored and how it is protected; refuse or disable persistent saving if you prefer. (2) Prefer using a secure secrets/vault mechanism rather than a plaintext note; request that the skill be modified to use secure storage or only accept one-time credentials. (3) If possible, test with a low-privilege or throwaway EDU.BOSS account. (4) Require explicit consent each time the skill runs if you do not want automatic reuse of stored credentials. These mitigations reduce the risk of unintended credential exposure.

Type: OpenClaw Skill Name: xuebang-data-skill Version: 1.0.1 The skill automates data retrieval from the Xuebang EDU.BOSS platform (boss.xuebangsoft.net). While its logic is aligned with its stated purpose, the SKILL.md instructions direct the AI agent to solicit user credentials and store them in plaintext within a local file (workspace/TOOLS.md) for persistence. This practice constitutes a significant security vulnerability (insecure credential storage), although there is no evidence of intentional data exfiltration or malicious redirection.