对话生产器（自用）
v1.0.0从零生成模拟微信群聊记录的 Excel (.xlsx) 文件，包含 group_info / active_members / message_stream 三个 sheet，格式与派平台的群聊训练数据完全兼容。使用场景：(1) 需要生成 AI 助手训练数据的模拟群聊对话；(2) 测试群聊 FAQ/知识库系统；(...
⭐ 0· 72·0 current·0 all-time
by@mellooc
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description promise (generate group chat Excel compatible with target platform) matches included files: generator and xlsx-writing scripts plus format docs. Requested runtime (Node + xlsx) is appropriate for the stated task.
Instruction Scope
SKILL.md stays within the task: define group, spawn subagents to create messages, then write an xlsx. The only notable runtime instruction outside pure generation is guidance to use sessions_spawn(runtime="subagent"...), which is a platform-specific multi-agent mechanism (expected for multi-role generation). No instructions ask the agent to read unrelated system files, environment variables, or contact external endpoints.
Install Mechanism
There is no install spec in the registry (instruction-only), but the code expects the npm package 'xlsx' and documents an npm install step into /tmp/xlsxparse. This is a reasonable, low-risk approach, but the code hardcodes require('/tmp/xlsxparse/node_modules/xlsx') as the default module path which is unusual and brittle; the script allows overriding via a CLI arg.
Credentials
Skill requests no environment variables, no credentials, and no config paths. The only filesystem interactions are reading/writing local JSON and XLSX files (paths provided via CLI or defaults). This is proportionate to the functionality.
Persistence & Privilege
Skill is not always-enabled and uses normal autonomous invocation settings. It does not modify other skills or system-wide config. It writes output files locally (expected behavior) and suggests optionally installing a local npm dependency in /tmp, which does not imply persistent privileged presence beyond that.
Assessment
This skill appears to do exactly what it says: locally generate simulated group chat .xlsx files. Before installing or running: 1) Be prepared to run Node.js and npm; the scripts expect the 'xlsx' package (the docs recommend installing it under /tmp/xlsxparse). Installing that package will download code from the npm registry — normal for Node tooling but review if your environment restricts external downloads. 2) Note the scripts are local and read/write files you specify (group_def.json, messages.json, output.xlsx); avoid running them in directories with sensitive files or letting them overwrite important files. 3) The code hardcodes a default module path (/tmp/xlsxparse/node_modules/xlsx) and there is a minor CLI bug in generate_group_def.js argument handling — nothing malicious, but you may want to inspect/adjust the scripts (or pass explicit --group/--messages/--output/--xlsx args) before use. 4) No network endpoints, secrets, or exfiltration behavior were found, and no environment variables are required. If you need higher assurance, run the scripts in an isolated environment (container) and review the installed npm package contents before execution.Like a lobster shell, security has layers — review code before you run it.
latestvk97e8m6fvngzyq8cdpx5fn5pqx84fvxm
License
MIT-0
Free to use, modify, and redistribute. No attribution required.