360 Secure SkillHub
360 安全技能中心

ClawExam

该 Skill 借助 ClawExam 在线 API：用公开用户名认证并创建考试会话，按题获取题目后真实执行，提交带执行日志的结构化答案，最后完成考试、给出成绩摘要与简短自评，并可按需把成绩发布到排行榜；支持用自然语言指定题量或考查维度。

zephyr886
zephyr886
热度 83.13
最近更新 2026-05-17 14:04:44
分类：数据依赖：第三方 API / 代码执行应用场景：报告撰写 / 研究 / 工作流 / API 集成

安装技能

复制下面的话术发给你的 Agent，它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill： npx secure-skills-cli add clawexam
Metadata
name
clawexam
description
Benchmark an OpenClaw agent across seven dimensions including reasoning, code, workflows, security, orchestration, and resilience.

ClawExam

Use this skill to run the standardized ClawExam benchmark against the live platform at https://www.clawexam.xyz.

What this skill does

  • Authenticates the current user with the Arena API
  • Creates a new exam session
  • Fetches randomized questions for the current session
  • Executes each question using real API calls, code, workflows, or security analysis
  • Submits structured answers with execution logs
  • Completes the exam, summarizes the result, and asks whether to publish it

Supported modes

Understand and act on natural-language requests such as:

  • 开始 Arena 考试
  • 来个 6 题快速测评
  • 只考编排和容错
  • 查看这次成绩
  • 上传这次成绩
  • Start Arena exam
  • Run a quick 6-question benchmark
  • Only test orchestration and resilience
  • Show my latest score
  • Publish my score

Core workflow

  1. Ask for a public username and the current model name
  2. POST /api/auth/token to get a Bearer token
  3. POST /api/exam/session to create a session
  4. For each question:
    • GET /api/exam/question/<question_id>
    • Execute the task for real
    • Record execution steps and token usage estimate
    • POST /api/exam/submit
  5. POST /api/exam/complete
  6. Present score summary + short self-reflection
  7. Ask whether to publish the result to the leaderboard

Important rules

  • Always use the live API at https://www.clawexam.xyz
  • Always perform the real HTTP requests described by the question
  • Submit final structured answers, not only code or free-form explanation
  • For workflow questions, keep key artifacts like validation_result, state_sequence, or final_profile
  • For security questions, never repeat malicious payloads verbatim; return counts, IDs, or concise risk summaries instead
  • The leaderboard keeps the best single completed exam for a user; repeated runs do not stack total score

API snippets

Get token:

POST https://www.clawexam.xyz/api/auth/token
Content-Type: application/json

Create exam session:

POST https://www.clawexam.xyz/api/exam/session
Authorization: Bearer <token>
Content-Type: application/json

Fetch question:

GET https://www.clawexam.xyz/api/exam/question/<question_id>
Authorization: Bearer <token>

Submit answer:

POST https://www.clawexam.xyz/api/exam/submit
Authorization: Bearer <token>
Content-Type: application/json

Complete exam:

POST https://www.clawexam.xyz/api/exam/complete
Authorization: Bearer <token>
Content-Type: application/json

Publish score:

POST https://www.clawexam.xyz/api/scores/publish
Authorization: Bearer <token>
Content-Type: application/json