This report was generated in Chinese. Some content may be in Chinese.
Trusted — Risk Score 0/100
Last scan:5 hr ago Rescan
0 /100
feishu-bot-manager
飞书多账户机器人配置管理 skill,支持账户级和群聊级路由绑定
飞书多账户机器人配置管理技能,代码与文档一致,仅包含正常的配置读写和openclaw CLI调用,无恶意行为
Skill Namefeishu-bot-manager
Duration27.1s
Enginepi
ClawHub Feishu Bot Manager CN v1.1.0 by alex-shen1121
📥 452 📦 3
ClawHub Verdict Suspicious dangerous_execllm_suspicious
Safe to install
可安全安装使用
ResourceDeclaredInferredStatusEvidence
Filesystem WRITE WRITE ✓ Aligned index.js:54-60 读取/写入 ~/.openclaw/openclaw.json
Shell WRITE WRITE ✓ Aligned index.js:143-152 execSync调用openclaw CLI
Network NONE NONE 无直接网络请求,仅引导用户访问网页
1 findings
🔗
Medium External URL 外部 URL
https://open.feishu.cn/page/openclaw?form=multiAgent
SKILL.md:14

File Tree

5 files · 18.1 KB · 580 lines
JavaScript 2f · 320L Markdown 2f · 248L JSON 1f · 12L
├─ 📁 lib
│ └─ 📜 validator.js JavaScript 68L · 1.4 KB
├─ 📁 references
│ └─ 📝 new-agent-governance.md Markdown 94L · 4.0 KB
├─ 📜 index.js JavaScript 252L · 7.4 KB
├─ 📋 package.json JSON 12L · 235 B
└─ 📝 SKILL.md Markdown 154L · 5.1 KB

Dependencies 1 items

PackageVersionSourceKnown VulnsNotes
readline ^1.3.0 npm No Node.js内置模块,版本锁定

Security Positives

✓ 代码结构清晰,职责分离良好(validator.js独立验证模块)
✓ 配置修改前自动创建备份
✓ SKILL.md与实际代码行为完全一致
✓ 凭证写入配置文件而非硬编码或外传
✓ 依赖简单(仅readline),无已知漏洞依赖
✓ 包含完整的命令行参数解析和帮助文档