QQBot Multi-Bind
v1.0.1快速配置 OpenClaw 多 QQBot 账号绑定到不同 Agent。用于首次安装 QQBot、新增 QQBot 账号、创建 agent 绑定关系、重启 gateway 使配置生效。当用户需要安装 QQBot 插件、添加新的 QQBot 机器人或配置多账号路由时使用此技能。
⭐ 1· 400·4 current·4 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The name/description (multi-QQBot account binding) matches the instructions: installing the qqbot plugin, adding accounts, editing ~/.openclaw/openclaw.json, creating bindings, and restarting the gateway. Required actions and artifacts are proportionate to the stated goal; no unrelated credentials or tools are requested.
Instruction Scope
Instructions ask the operator to create QQ Open Platform credentials (AppID/AppSecret) and paste them into the OpenClaw config (~/.openclaw/openclaw.json), then install the plugin and restart the gateway. This is within scope, but the guidance will cause secrets (AppSecret/clientSecret) to be stored in plaintext config files—users should be aware and protect that file. The SKILL.md does not instruct reading unrelated system files or exfiltrating data.
Install Mechanism
The registry has no automated install spec; the SKILL.md recommends installing via npm (@tencent-connect/openclaw-qqbot) or cloning a GitHub repository (github.com/tencent-connect/openclaw-qqbot). Those are normal for plugin installation, but installing third-party code from npm/GitHub executes external code and carries the usual supply-chain risk—verify the package/repo before installing.
Credentials
The skill requests no environment variables or unrelated credentials. The only secrets referenced (QQ AppID/AppSecret / clientSecret) are directly required by QQBot configuration and are appropriate for the task.
Persistence & Privilege
The skill is instruction-only, has no install metadata that forces persistence (always: false), and does not request system-wide config modification beyond the expected OpenClaw config file or changing the gateway state. Autonomous invocation is allowed by platform default but the skill does not ask for elevated or persistent privileges.
Assessment
This skill appears coherent for installing and configuring multiple QQBot accounts. Before proceeding: 1) Verify the plugin source (@tencent-connect/openclaw-qqbot and github.com/tencent-connect/openclaw-qqbot) to ensure it's the official/expected code; 2) Be aware AppSecret/clientSecret values will be stored in ~/.openclaw/openclaw.json (plaintext)—restrict filesystem permissions and consider secrets management; 3) Installing from npm or cloning GitHub runs third-party code—review the package or repository if you require more assurance; 4) Back up your openclaw.json before editing and confirm gateway restart is safe in your environment.Like a lobster shell, security has layers — review code before you run it.
latestvk970j2wr7nemph3sz0xz2pmtvd82x9xa
License
MIT-0
Free to use, modify, and redistribute. No attribution required.