Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

agent-father

v1.0.0

创建和管理 AI Agent/员工的全流程工具。支持一键创建 Agent、飞书群组、工作区配置、员工入职。自动从 openclaw.json 读取配置。使用场景:(1) 创建新 Agent/员工,(2) 批量入职,(3) 群组配置,(4) 岗前培训,(5) 员工管理。

0· 504·3 current·3 all-time
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
medium confidence
Purpose & Capability
Name/description (agent/employee onboarding, workspace and Feishu group management) align with files and scripts. Required binaries (bash, curl, node, grep, sed, etc.) are used by the scripts and are proportionate to the task. The scripts operate on ~/.openclaw and related workspace paths, which is expected for an OpenClaw-related agent-management skill.
Instruction Scope
SKILL.md instructs running the included shell scripts which create directories, JSON files, and call the Feishu API. The scripts read ~/.openclaw/openclaw.json (or use OPENCLAW_BASE) to obtain Feishu credentials and may invoke the 'openclaw' CLI if present. That scope is appropriate, but the static scan flagged 'unicode-control-chars' inside SKILL.md (possible prompt-injection formatting). This is likely a formatting artifact but should be inspected to ensure no hidden control characters were added to manipulate tools or readers.
Install Mechanism
No install spec. The skill ships as scripts and docs only; nothing is downloaded from third-party URLs or extracted. Risk from install mechanism is low because nothing external is pulled or installed by the skill itself.
Credentials
Registry metadata lists no required env vars, but scripts actually read/allow: OPENCLAW_BASE, FEISHU_APP_ID, FEISHU_APP_SECRET, FEISHU_INITIAL_USER and rely on an openclaw CLI if present. These env vars are proportional to the stated purpose (Feishu API access and locating OpenClaw config), but the metadata could more clearly declare the optional FEISHU_* and OPENCLAW_BASE environment variables so users know which secrets/configs are used.
Persistence & Privilege
always:false and normal autonomous invocation settings. The scripts create and delete files under the user's OpenClaw directories (~/.openclaw) and register agents using the openclaw CLI if available. They do not modify other skills' configurations or system-wide settings beyond the user's OpenClaw workspace. Behaviors are consistent with the declared purpose.
Scan Findings in Context
[unicode-control-chars] unexpected: The pre-scan found unicode control characters in SKILL.md. This is not expected for a normal README and could be an accidental formatting artifact. It can also be used in prompt-injection or to hide characters; inspect the SKILL.md for zero-width or control characters before trusting automated processing.
Assessment
This skill appears to do what it says: create agent folders, workspace files, and Feishu chats using credentials found in ~/.openclaw/openclaw.json or optional FEISHU_APP_ID/FEISHU_APP_SECRET environment variables. Before running: 1) Inspect the scripts locally (they are bundled) to confirm they match your expectations (they are plain shell scripts and Node one-liners). 2) Back up your ~/.openclaw/openclaw.json and workspace directories — the scripts create and can delete agent/workspace directories. 3) Provide Feishu credentials only if you intend the skill to call Feishu APIs; treat FEISHU_APP_SECRET as sensitive. 4) Remove or review any unexpected unicode/control characters in SKILL.md (scanner flagged them). 5) Run in a safe/staging environment first (or with non-production Feishu app credentials) to confirm behavior. If you need higher assurance, request the publisher/source or run the scripts under a sandboxed account.

Like a lobster shell, security has layers — review code before you run it.

Runtime requirements

👨‍🍼 Clawdis
Binsbash, mkdir, cat, grep, sed, tr, curl, node
latestvk9720feth9x0exyehb043k4vn5826zd8
504downloads
0stars
1versions
Updated 14h ago
v1.0.0
MIT-0

👨‍🍼 Agent Father Skill

创建新 Agent 和员工的完整解决方案,自动从 openclaw.json 读取飞书配置,包含 JSON 配置、会话管理、群组配置和岗前培训。

🚀 快速开始

创建单个员工

# 基本用法
./scripts/create-employee.sh <姓名> <工号> <电话> [描述] [初始用户]

# 示例:创建客服工程师
./scripts/create-employee.sh "客服工程师" "CS-001" "13800138000" "客服团队"

批量创建员工

# 使用批量脚本
./scripts/batch-create.sh employees.csv

删除员工

./scripts/delete-agent.sh <agent-id>

📋 核心脚本

1. create-employee.sh - 创建员工

用法:

./scripts/create-employee.sh <agent-name> <role> <phone> [description] [initial-user]

参数:

参数必填说明示例
agent-nameAgent 显示名称客服工程师
role工号/角色代码CS-001
phone联系电话13800138000
description群组描述客服团队
initial-user初始成员用户 IDou_xxx

执行流程:

  1. ✅ 创建飞书群组
  2. ✅ 创建独立工作区
  3. ✅ 生成 agent.json 配置
  4. ✅ 创建 IDENTITY.md 和 SOUL.md
  5. ✅ 注册到 openclaw
  6. ✅ 更新员工名单

2. delete-agent.sh - 删除员工

用法:

./scripts/delete-agent.sh <agent-id>

功能:

  • 删除 agent 目录
  • 删除工作区
  • 从 openclaw.json 移除配置
  • 从员工名单移除
  • 可选:删除飞书群组

3. create-feishu-chat.sh - 创建飞书群组

用法:

./scripts/create-feishu-chat.sh --name "群名称" --description "描述" --users "ou_xxx,ou_yyy"

参数:

  • --name: 群名称(必填)
  • --description: 群描述(可选)
  • --users: 初始成员,逗号分隔(可选)
  • --owner: 群主用户 ID(可选)
  • --type: 群类型 public/private/group(默认:group)

配置: 自动从 ~/.openclaw/openclaw.json 读取飞书 App ID 和 App Secret


4. onboarding.sh - 员工入职培训

用法:

./scripts/onboarding.sh <agent-id>

功能:

  • 生成岗前培训材料
  • 配置工作流程
  • 设置工作规范

🔧 工具函数

list-employees - 列出所有员工

# 查看员工名单
cat ~/.openclaw/workspace/employees.json | jq '.employees[] | {id, name, phone, chatId}'

get-agent-info - 获取 Agent 信息

# 查看指定 Agent 配置
cat ~/.openclaw/agents/<agent-id>/agent/agent.json | jq .

check-agent-status - 检查 Agent 状态

# 检查配置是否有效
openclaw agents list --bindings

📁 目录结构

agent-father/
├── SKILL.md                      # 技能文档
├── QUICKSTART.md                 # 快速开始指南
├── scripts/
│   ├── create-employee.sh        # 创建员工(主脚本)
│   ├── delete-agent.sh           # 删除员工
│   ├── create-feishu-chat.sh     # 创建飞书群组
│   ├── onboarding.sh             # 入职培训
│   └── batch-create.sh           # 批量创建
├── references/
│   ├── templates/                # 配置模板
│   └── examples/                 # 使用示例
└── 修复报告.md                    # 问题修复记录

🎯 使用场景

场景 1: 创建新岗位

# 创建产品经理
./scripts/create-employee.sh "产品经理" "PM-001" "13900139000" "产品团队"

# 创建测试工程师
./scripts/create-employee.sh "测试工程师" "QA-001" "13700137000" "测试团队"

场景 2: 员工离职

# 删除员工(保留数据)
./scripts/delete-agent.sh cs-001

# 删除员工(包含飞书群组)
./scripts/delete-agent.sh cs-001 --delete-chat

⚠️ 注意事项

1. 命名规范

  • Agent ID: 小写字母 + 数字 + 连字符(如:cs-001
  • 工号格式: 大写字母 + 连字符 + 数字(如:CS-001
  • 避免使用: main 是保留名称

2. 飞书配置

确保 ~/.openclaw/openclaw.json 包含飞书配置:

{
  "channels": {
    "feishu": {
      "appId": "cli_xxx",
      "appSecret": "xxx"
    }
  }
}

🔍 故障排查

问题 1: "main" is reserved

解决: 使用其他名称,如 cs-001dev-001

问题 2: JSON 配置无效

解决:

openclaw status
openclaw doctor --fix

问题 3: 飞书群组创建失败

解决:

cat ~/.openclaw/openclaw.json | grep -A 2 feishu
openclaw channels login --channel feishu

用 AI 赋能团队,让每个岗位都有专属智能助手。

Comments

Loading comments...