← Back to Skills Marketplace
Trivia Quiz
by
bytesagain-lab
· GitHub ↗
· v2.0.1
· MIT-0
501
Downloads
0
Stars
3
Active Installs
14
Versions
Install in OpenClaw
/install trivia-quiz
Description
Play knowledge quizzes with facts, categories, and daily challenges. Use when learning topics, drilling flashcards, reviewing answers, tracking progress.
Usage Guidance
This skill appears to do what it claims: a local trivia/flashcard CLI that writes history and note logs to ~/.local/share/trivia-quiz/ (or $TRIVIA_QUIZ_DIR if you set it). Before installing/running: 1) Note that scripts/trivia.sh calls python3 — ensure you have Python 3 installed (SKILL.md omitted this). 2) If you want privacy, set TRIVIA_QUIZ_DIR to a directory you control and check file permissions: history.log and data.log are plaintext. 3) Review the two scripts (they are short and readable) or run them in a restricted environment if you prefer. 4) No network access or credentials are used by the skill, so there is no hidden exfiltration in the provided code.
Capability Analysis
Type: OpenClaw Skill
Name: trivia-quiz
Version: 2.0.1
The skill bundle contains a shell injection vulnerability in 'scripts/trivia.sh' due to an unquoted variable '$INPUT' being passed directly to a python3 command line. This allows for arbitrary command execution if a user or agent provides input containing shell metacharacters (e.g., 'play 5; touch /tmp/pwned'). While the primary logic in 'scripts/script.sh' and the instructions in 'SKILL.md' appear benign and aligned with the stated purpose of a study assistant, this vulnerability represents a significant security risk.
Capability Assessment
Purpose & Capability
Name/description describe a local trivia/learning tool and the provided scripts implement that functionality. One inconsistency: SKILL.md lists Bash ≥4 and coreutils but does not mention Python 3, yet scripts/trivia.sh invokes python3. Other than that, required files and behavior (local data storage under TRIVIA_QUIZ_DIR) align with the stated purpose.
Instruction Scope
Runtime instructions and examples map to the shipped scripts. The SKILL.md and scripts only read/write files under the skill data directory (default ~/.local/share/trivia-quiz/), use standard utilities (date, wc), and print content; they do not reference unrelated system paths, credentials, or external endpoints. No network calls or unexpected data transmission are present.
Install Mechanism
No install spec (instruction-only) is present, which keeps the installation surface minimal. Code files are included in the package but there is no download-from-URL or archive extraction step. This is low-risk from an install mechanism perspective.
Credentials
The skill requires no credentials or special environment variables. It optionally respects TRIVIA_QUIZ_DIR and XDG_DATA_HOME/HOME for data location. There are no secret-like environment variables requested, nor access to unrelated configs.
Persistence & Privilege
always is false and the skill does not modify other skills or system-wide settings. It creates and writes to its own data directory (history.log and data.log) in the user's home area, which is expected for an app that stores notes and history.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install trivia-quiz - After installation, invoke the skill by name or use
/trivia-quiz - Provide required inputs per the skill's parameter spec and get structured output
Version History
v2.0.1
update
v2.0.0
v2.5 standard: Use-when desc, homepage, source, security fix
v2.3.6
retry-fix-token
v2.3.5
yaml-fix+quality
v2.3.4
Quality upgrade
v2.3.3
Quality upgrade: custom functionality
v2.3.2
De-template, unique content, script cleanup
v2.3.1
Quality improvement: better docs, examples, cleaner text
v2.3.0
Quality fixes: removed third-party references, aligned docs with implementation
v2.2.0
Enhanced descriptions for better AI triggering
v2.1.0
Enhanced descriptions for better AI triggering
v1.0.2
Runtime fix
v1.0.1
Add runtime declaration + security compliance
v1.0.0
Initial release of Trivia Quiz.
- Offers random trivia, category-based questions, hard challenges, fun facts, and a daily quiz.
- Fully supports both English and Chinese, with localized content.
- Provides tailored output for various trivia scenarios.
- Multiple commands available to cover a complete trivia workflow.
Metadata
Frequently Asked Questions
What is Trivia Quiz?
Play knowledge quizzes with facts, categories, and daily challenges. Use when learning topics, drilling flashcards, reviewing answers, tracking progress. It is an AI Agent Skill for Claude Code / OpenClaw, with 501 downloads so far.
How do I install Trivia Quiz?
Run "/install trivia-quiz" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is Trivia Quiz free?
Yes, Trivia Quiz is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does Trivia Quiz support?
Trivia Quiz is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created Trivia Quiz?
It is built and maintained by bytesagain-lab (@bytesagain-lab); the current version is v2.0.1.
More Skills