📦 Ai Intelligent After Sales Service — 智能售后
v1.0.3自动化工单分配与客户满意度跟踪,实现售后全流程智能化管理。
0· 266·1 当前·1 累计
下载技能包
最后更新
2026/4/21
安全扫描
OpenClaw
可疑
medium confidenceThe skill's description is plausible, but the runtime instructions tell an agent to clone and run an external GitHub project (unknown/pinned commit) and omit needed configuration/credentials, which is disproportionate and risky.
评估建议
This skill tells you to fetch and run an external GitHub project but provides no environment/credential details and no pinned release. Before installing/ running it: 1) verify the GitHub repository URL and inspect the code (especially requirements.txt and app.py); 2) prefer a pinned commit or signed release rather than cloning an unpinned branch; 3) run the service in an isolated sandbox/container and not on production hosts; 4) require explicit listing of all needed environment variables (DB, A...详细分析 ▾
ℹ 用途与能力
The name/description (automated after‑sales service) matches the actions described in the README-style text, but the skill is presented as an OpenClaw skill while the SKILL.md mainly instructs installing a standalone web app. That mismatch (skill vs full service install) is unexpected but explainable.
⚠ 指令范围
SKILL.md directs the user/agent to run 'git clone', 'pip install -r requirements.txt' and 'python app.py' from a GitHub repo. It also references database-backed features and configuration steps (service region, personnel, rules) but does not declare how to supply DB credentials or other config — the instructions therefore ask the agent to fetch and execute external code and to manage sensitive configuration without specifying where secrets come from.
⚠ 安装机制
There is no formal install spec in the registry — instead the doc instructs cloning an external GitHub repository and installing dependencies. While GitHub is a common host, the clone is unpinned (no commit/tag), pip installs unknown requirements, and running app.py executes code fetched at runtime. That combination increases risk of running arbitrary/unreviewed code.
⚠ 凭证需求
The skill declares no required environment variables or primary credential, yet the functionality (database, inventory, notifications, NLP) almost certainly requires credentials/config (DB connection strings, API keys, SMTP, etc.). The omission of any declared env vars or configuration steps is disproportionate and suggests missing/undeclared secrets handling.
ℹ 持久化与权限
always is false (good). The skill does not request elevated OpenClaw privileges. However the instructions launch a networked web app (python app.py) which could open listeners and run indefinitely; that runtime persistence is not declared in the registry and should be considered before executing.
安全有层次,运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.32026/3/16
- No changes detected in this version. - Version number updated to 1.0.3.
● 无害
安装命令
点击复制官方npx clawhub@latest install ai-intelligent-after-sales-service
镜像加速npx clawhub@latest install ai-intelligent-after-sales-service --registry https://cn.longxiaskill.com