Chatbot Builder

Create, train, and deploy AI chatbots using your data across multiple channels like web, Slack, Discord, and WhatsApp with context-aware responses.

Security Scan

The SKILL.md tells the user/agent to run a local chatbot.sh and to use an OpenAI API key, but the package contains no code, no install steps, and declares no required environment variables—this mismatch is incoherent and risky.

Purpose & Capability

The skill claims to build, train, and deploy chatbots across many channels, but the bundle contains only an instruction file (no scripts, no libraries, no deployment tooling). The runtime commands (./chatbot.sh ...) imply shipped binaries/scripts that are not present. The declared metadata lists no required credentials or config paths despite the README saying an OpenAI API key is required.

Instruction Scope

Runtime instructions direct execution of a local script (./chatbot.sh create/train/deploy) and refer to training on local data (e.g., --data ./docs). Those instructions could cause the agent or user to run an unknown executable that isn't packaged here. The SKILL.md also references an OpenAI API key but does not specify which environment variable name to use; the instructions grant broad discretion without the actual implementation included.

Install Mechanism

There is no install spec and no files are written to disk by the skill itself (instruction-only). That limits automatic code execution by the skill package. However, the instructions explicitly tell a user/agent to run a local script that isn't included, which shifts risk to whatever the user runs.

Credentials

The SKILL.md states an OpenAI API key is required but the skill metadata declares no required env vars or primary credential. This mismatch is unexplained and could lead users to set sensitive keys for an unknown script or agent action. No other credentials are requested, but the single missing declared env var is significant given the instructions.

Persistence & Privilege

The skill is not always-enabled and does not request elevated platform privileges. It is user-invocable and can be invoked autonomously (default), which is normal; there is no indication the skill attempts to alter other skills or agent-wide config.

What to consider before installing

This skill is an instruction-only manifest that tells you to run ./chatbot.sh and to use an OpenAI API key, but it does not include the script or declare which env var to set. Do not run unknown scripts from an unverified skill. Before installing or following these instructions: 1) Request the source code or a link to an authoritative repository/homepage and verify the chatbot.sh script and any installers; 2) Inspect any scripts for network calls, hardcoded endpoints, or commands that read arbitrary files; 3) Never paste your OpenAI key (or other secrets) into a script you haven't reviewed—prefer storing keys in a known env var (e.g., OPENAI_API_KEY) and verify the skill documentation; 4) Prefer skills with published source, clear install steps, and declared required environment variables. If the author provides the missing chatbot.sh and source repo, re-evaluate for coherence and any network/endpoints it contacts.

Build AI-powered chatbots in minutes.

Features

• Train on your data - PDFs, websites, documents
• Multiple channels - Website, Slack, Discord, WhatsApp
• LLM Integration - OpenAI, Anthropic, local models
• Conversational memory - Context-aware responses
• Analytics - Track conversations

Quick Start

# Create chatbot
./chatbot.sh create support-bot

# Train on data
./chatbot.sh train support-bot --data ./docs

# Deploy to web
./chatbot.sh deploy support-bot --channel web

# Deploy to Slack
./chatbot.sh deploy support-bot --channel slack

Channels

• Website widget
• Slack
• Discord
• WhatsApp
• Telegram

Requirements

• Python 3.8+
• OpenAI API key (or use local models)

Author

Sunshine-del-ux