📦 Algernon Feynman — 费曼学习
v1.0.0在 OpenAlgernon 中启动费曼技巧学习会话：输入 `/algernon feynman [SLUG]`、说“feynman”“quero explicar conceitos”或“me testa ex…”，即可用 AI 引导你用最简单的语言讲解概念、发现漏洞并加深理解。
0· 203·0 当前·0 累计
by 下载技能包
最后更新
2026/4/22
安全扫描
OpenClaw
可疑
medium confidenceNULL
评估建议
This skill looks like a legitimate local study helper, but review and consent to its local and optional remote accesses before installing. Specifically: (1) confirm you are comfortable letting the skill read ${HOME}/.openalgernon/data/study.db (inspect that DB contents first); (2) ensure sqlite3 and notion-cli are present and understand that notion-cli plus NOTION_PAGE_ID could cause session content to be sent to Notion (supply only if you trust that); (3) expect it will append lines to ${ALGERN...详细分析 ▾
ℹ 用途与能力
The SKILL.md behavior (select cards from a local SQLite DB, run sessions, save session memory, optionally call a Notion CLI) fits the described Feynman-session purpose — reading a study DB and saving session notes is expected. However, the registry metadata declares no required binaries, env vars, or config paths while the instructions assume sqlite3, ALGERNON_HOME (~/.openalgernon), DB at ${ALGERNON_HOME}/data/study.db, and an optional NOTION_CLI/NOTION_PAGE_ID. That mismatch (undeclared dependencies/config access) is unexpected.
⚠ 指令范围
Runtime instructions explicitly run sqlite3 against a local DB, append a session line to a memory file under ${ALGERNON_HOME}/memory/conversations/YYYY-MM-DD.md, and optionally invoke an external CLI (notion-cli) to append content to a Notion page. These steps read local user data and write files; they also call an external tool that could transmit data. The instructions do not declare these file/CLI accesses in the skill metadata, nor do they include safeguards or explicit user prompts to confirm access to those paths.
✓ 安装机制
Instruction-only skill with no install spec and no code files. This is low-risk from an install/extraction perspective (nothing downloaded or written by an installer).
⚠ 凭证需求
The skill references environment/config items (ALGERNON_HOME, DB path, NOTION_CLI, NOTION_PAGE_ID, and the sqlite3 binary) but the registry lists no required env vars or primary credential. NOTION_CLI and NOTION_PAGE_ID imply external credentials or tokens that are not declared. The absence of declared required env/configs is disproportionate and reduces transparency about what secrets or access the skill will use.
ℹ 持久化与权限
The skill does not request always: true and does not modify other skills. It writes session summaries to a file under its own ALGERNON_HOME path and may call notion-cli to append to a remote page — both are reasonable for a study session skill, but the user should expect local files to be created/updated and optional remote posting if NOTION variables are present.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/3/16
NULL
● 可疑
安装命令
点击复制官方npx clawhub@latest install algernon-feynman
镜像加速npx clawhub@latest install algernon-feynman --registry https://cn.longxiaskill.com