Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

SmartHome Quotation - Feishu

SmartHome Quotation - Feishu | 智能家居全屋方案报价系统。基于飞书文档输出。完整报价流程:需求采集→品牌选择(小米/米家、Aqara/HomeKit、华为生态)→产品选型→开关配置计算→报价单生成。支持 linptech 开关、人体存在传感器、电动窗帘、空调控制、门锁、摄像头等全品类...

MIT-0 · Free to use, modify, and redistribute. No attribution required.
0 · 18 · 0 current installs · 0 all-time installs
MIT-0
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
The name/description (smart-home quotation producing Feishu docs) matches the included product catalogs, rules, templates and example quotes. However the skill claims to "生成飞书文档,发送链接给用户" (generate Feishu document and send link) yet declares no credentials or integration requirements (no Feishu/Lark API keys or webhook info). That mismatch may simply mean the skill yields Markdown for manual upload, but it is an inconsistency between claimed automation and declared requirements.
Instruction Scope
SKILL.md instructs the agent to collect requirements, pick products from the included references, calculate switch counts, save the quote to quotes/[name_date].md, and "update memory." The instructions reference only the repo files (products/business rules) and the local quotes directory. They do not instruct reading unrelated system files or exfiltrating secrets. The only ambiguous step is "send link to user" for Feishu without describing how.
Install Mechanism
This is an instruction-only skill with no install spec and no code files that execute on install. That is low-risk: nothing is downloaded or executed by an installer.
!
Credentials
No environment variables or credentials are requested. That is consistent with a skill that returns a Markdown quote for manual posting, but inconsistent with explicit automation of Feishu (which normally requires API credentials/webhook). If you expect the skill to automatically create/send Feishu docs, it will need Feishu OAuth/API credentials (which are not declared). Also the skill saves quotes locally and updates agent memory — those actions may store customer data; the skill does not document any retention/consent controls.
Persistence & Privilege
always:false and disable-model-invocation:false (normal). The skill writes quoted files into the repository's quotes/ directory and asks to update memory; both are reasonable for a quoting tool. It does not request elevated or cross-skill persistent privileges.
What to consider before installing
This skill appears to be a coherent quoting/template system: it contains product databases, business rules, and example quotes, and will produce Markdown quotes saved to quotes/*.md. Before installing, confirm whether you expect the skill to automatically create or send Feishu (Lark) documents — if you do, ask the author to add explicit Feishu integration details and to declare the required environment variables (API key, app secret, or webhook) and an OAuth flow. Otherwise treat the skill as a generator that returns Markdown for manual upload. Also consider: 1) local storage: quotes/*.md will contain customer info — ensure you are comfortable with that retention and access; 2) data validity: product prices and rules appear to be static files — validate them periodically; 3) memory writes: the skill will "update memory" with scheme summaries — check your agent's memory policies and privacy expectations. If you need automatic Feishu sending, request a secure credential flow (not hard-coded secrets) and clear logging/consent behavior from the developer.

Like a lobster shell, security has layers — review code before you run it.

Current versionv1.4.0
Download zip
latestvk97a9zfkvzrfvxwjew258pqcyx836r4f

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

SKILL.md

SmartHome Quotation - Feishu

智能家居全屋方案报价技能

1. 工作流程

需求采集 → 品牌确认 → 产品选型 → 开关计算 → 报价生成 → 交付存档

Step 1: 采集需求

必问信息:

  1. 户型(几室几厅/建筑面积)
  2. 想要的智能功能(灯控/窗帘/空调/安防/传感器/语音/场景)
  3. 预算范围(方便推荐档次)
  4. 偏好品牌(没说默认米家)

采集示例:

"请问您想要做哪里的智能家居方案?是几室几厅呢?想要实现哪些功能,比如灯光控制、电动窗帘、空调控制安防这些?"

Step 2: 品牌选择

客户需求/预算推荐生态
追求性价比米家/小米(蓝牙mesh)
苹果生态/Aqara粉丝Aqara/HomeKit(Zigbee)
高端别墅/大平层华为(PLC方案)
没明确需求默认米家(最主流)

询问示例:

"您偏向米家还是Aqara的生态呢?或者有指定品牌吗?"

Step 3: 产品选型

根据需求从产品库选择对应产品,参考 references/products.md

常见配置速查:

场景推荐产品
基础灯控linptech屏显开关T3系列
窗帘控制米家智能隐形窗帘电机 ¥699/套
客厅大屏控制小米智能中控屏 ¥399
卧室语音控制Xiaomi智能音箱Pro ¥299
人体感应(过道/卫生间)linptech ES1 ¥158
门窗安防小米门窗传感器2 ¥49
风管机空调米家空调内机控制器B27 ¥340
挂机/柜机空调米家空调伴侣2 ¥79

Step 4: 开关计算

核心规则:

  • 每路灯 = 必须配1个开关(除非客户明确不要)
  • 单键=1路,双键=2路,三键=3路
  • 超过3路用多个开关组合

开关数量计算:

客厅有9路灯 → 3键+3键+2键+1键 = 9路 ✅
卧室走廊3路灯 → 3键×1 = 3路 ✅

双控规则:

  • 两个位置控制同一路灯
  • 用两个同样型号的开关
  • 有线开关 + 无线开关(无需额外布线)

Step 5: 报价生成

报价单格式(飞书文档):

# 全屋智能方案报价单

**项目名称:** [户型]
**方案日期:** [YYYY-MM-DD]
**客户需求:** [功能列表]

---

## [房间名称]

| 设备名称 | 型号 | 数量 | 单位 | 单价 | 小计 |
|---------|------|------|------|------|------|
| [如:电动窗帘] | [具体型号] | [数量] | [个/套] | ¥[价格] | ¥[小计] |

**小计:¥XXX**

---

## 报价汇总

| 项目 | 金额 |
|------|------|
| 设备合计 | ¥X,XXX |
| 服务费(25%) | ¥X,XXX |
| **总计** | **¥X,XXX** |

---

## 备注

1. 以上报价不含开槽布线、不含耗材、无税金。
2. 电动窗帘包含电机和轨道。
3. 双控方案采用两个同型号开关实现。
4. 中控屏已包含语音助手和蓝牙网关功能。
5. 设备质保按厂家标准执行。

Step 6: 交付存档

  1. 生成飞书文档,发送链接给用户
  2. 本地保存到 quotes/[户型]_[日期].md
  3. 更新记忆:记录本次方案概要

2. 报价公式

设备总价 = Σ(单价 × 数量)
服务费 = 设备总价 × 25%
最终报价 = 设备总价 + 服务费

3. 常见户型参考配置

三室两厅(基础版)

房间产品数量
客厅小米中控屏1
米家窗帘电机2
linptech双键开关1
linptech单键开关2
餐厅linptech单键开关1
主卧米家窗帘电机1
linptech单键开关1
次卧×2linptech单键开关各1
过道/卫生间linptech ES12

四室两厅(进阶版)

在基础版上加:

  • 客厅增加小爱音箱Pro
  • 餐厅增加三键开关
  • 主卧增加小米中控屏
  • 空调控制增加小超人

4. 报价前检查清单

发送前逐项确认:

  • 生态品牌是否已确认?
  • 开关数量是否=路灯数量?
  • 双控开关是否用同样型号?
  • 电动窗帘是否写清布帘/纱帘?
  • 服务费是否按25%计算?
  • 总价是否合理(有没漏项)?

5. 常见错误警告

⚠️ 开关算少了

  • 每路灯必须配1个开关
  • 检查:开关键数总和 ≥ 路灯数量

⚠️ 窗帘漏写

  • 一扇窗户=1套电机
  • 布帘+纱帘=2套

⚠️ 双控用错开关

  • 必须两个同样型号
  • 不能一个有线的+一个无线的

⚠️ 生态选错

  • 米家默认蓝牙mesh产品
  • Aqara是Zigbee产品
  • 两者不兼容

6. 参考资料

  • 完整产品库:references/products.md
  • 业务规则详解:references/business_rules.md
  • 本地报价记录:quotes/

7. 更新日志

  • v1.3.0: 改名 SmartHome Quotation - Feishu
  • v1.2.0: 增加华为生态产品库
  • v1.1.0: 增加完整产品数据库
  • v1.0.0: 初版发布

Files

7 total
Select a file
Select a file to preview.

Comments

Loading comments…