Case 03570
A fast, offline static risk analysis CLI for AI agent skill files. Detects malicious instructions, steganographic payloads, and dangerous capability chains.
npx -y skills add knownasnaffy/prompthound --skill case_03570Assembled from the repository path, not quoted from the project. Check it against their README if it does not work.
2 things to look at
- no licenseNo license file was found in the repository. Code published without one is not open source by default, so using it at work is a question for whoever answers licensing questions where you are.
- 0 stars0 stars. Stars are a popularity signal and not a quality one, but at this level it is likely that nobody has read this closely except its author, and you would be relying on your own review.
What its author says it does
Copied from the file, not written here
每日英语学习 Skill — 词汇、句子、语法训练,内置单词库(A1-B2),间隔重复记忆算法,每日推送单词+句子,测验练习,进度追踪连续打卡。触发词:学英语、英语单词、今日单词、英语练习、测验、我的进度、开启推送。/ Daily English learning: vocabulary, sentences, grammar. Built-in A1-B2 word bank, spaced repetition, daily push, quiz, progress tracking, streaks.
SKILL.md
3.3 KB, as published. Nobody here has run it
English Daily
私人英语学习助手 — 每日单词 · SRS复习 · 测验打卡 · 进度追踪
何时使用
- 用户说"学英语""英语单词""今日单词""英语练习"
- 用户想背单词、做填空、做选择题
- 用户说"测验""我的进度""连续打卡""学习报告"
- 用户说"开启推送""每天推英语单词"
核心命令
# 注册(首次使用)
node scripts/register.js <userId> <姓名> [等级 A1/A2/B1/B2] [每日目标 1-20]
# 今日学习(每日推送内容)
node scripts/daily-push.js <userId>
# 测验练习
node scripts/quiz.js <userId> [vocab|sentence|mixed]
# 记录测验积分(Claude 在测验完成后调用)
node scripts/quiz.js <userId> --score <正确题数×10>
# 查看进度
node scripts/progress.js <userId>
# 推送管理
node scripts/push-toggle.js on <userId> [--morning 08:00] [--channel telegram]
node scripts/push-toggle.js off <userId>
node scripts/push-toggle.js status <userId>
学习流程
- 注册 →
register.js创建学习档案(等级、每日目标) - 每日学习 →
daily-push.js输出今日复习词 + 新词列表 - 测验 →
quiz.js生成5题(词义选择或句子填空),Claude 逐题互动 - 记分 → 测验完成后 Claude 调用
--score记录积分并更新SRS进度 - 进度 →
progress.js显示连续打卡、掌握词数、升级进度
推送设置
node scripts/push-toggle.js on <userId> # 默认 08:00
node scripts/push-toggle.js on <userId> --morning 07:30 --channel feishu
node scripts/push-toggle.js off <userId>
支持渠道:telegram / feishu / slack / discord
等级体系
| 等级 | 词汇量 | 升级条件(掌握词数) |
|---|---|---|
| A1 | ~40词 | 掌握40词 → 升A2 |
| A2 | ~50词 | 掌握90词 → 升B1 |
| B1 | ~40词 | 掌握130词 → 升B2 |
| B2 | ~30词 | 最高等级 |
掌握标准:SRS间隔 ≥ 7天(即多次正确复习)
SRS算法说明
采用简化SM-2间隔重复:
- 质量1(遗忘)/ 质量2(困难)→ 明天复习
- 质量3(掌握)→ 间隔 × 1.5
- 质量4(轻松)→ 间隔 × 2.0
- 最大间隔30天
注意事项
- 数据存储在
data/users/<userId>.json,无外部API依赖 - 内置单词库(A1-B2共约160词),
data/wordbank.json - 所有脚本仅使用 Node.js 内置模块(fs/path),无需 npm install
- 用户ID仅允许字母、数字、连字符、下划线(防路径穿越)