中医执业医师备考助手

中医执业医师考试备考助手 - 生成每日复习计划、评估答案、管理错题集

This skill appears to do what it says: generate plans, grade answers, and keep a local wrong-question database. Before installing or enabling it: 1) Review the full assistant.js (the provided preview was truncated) to confirm there are no network calls, hidden endpoints, or uses of child_process.execSync with untrusted input — the script imports execSync which can run shell commands if used later. 2) Note the skill writes files under its own memory/ directory; if you have sensitive files, do not point any sync functionality at Desktop or other private folders until you inspect that code. 3) There is a robustness bug in the visible code (OUTPUT_DIR is referenced but not defined) — expect potential runtime errors. 4) If you will allow autonomous invocation, consider running it in a restricted environment or sandbox first and back up any important local data. If you want higher assurance, provide the remaining lines of assistant.js so they can be reviewed for any use of execSync, network requests, or filesystem operations outside the skill directory.

Type: OpenClaw Skill Name: tcm-exam-assistant Version: 1.0.0 The skill bundle is a legitimate study assistant for Traditional Chinese Medicine (TCM) exams, designed to generate study plans and manage practice questions. The code in `assistant.js` handles local state via JSON files in a `memory/` directory and includes logic for calculating study loads and evaluating test answers. While the script contains a minor bug (an undefined `OUTPUT_DIR` variable) and an unused `child_process.execSync` import, there are no indicators of malicious intent, data exfiltration, or prompt injection attacks.