Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

AI Chatbot Service

v1.0.0

智能客服系统,支持FAQ自动回复、意图识别、多轮对话

0· 451·2 current·2 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
Name/description (智能客服、FAQ、意图识别、多轮对话) match the provided SKILL.md and the included Python tool. The only required binary is python3, which is appropriate and proportional.
Instruction Scope
SKILL.md usage is limited to running the local command and managing the knowledge base. The instructions do not ask the agent to read unrelated files, environment variables, or transmit data to external endpoints.
Install Mechanism
No install spec; the skill is instruction+script only. That minimizes disk-write risk. The bundled Python file is plain source with no downloads or archive extraction.
Credentials
The skill requires no environment variables, no credentials, and no config paths. The behavior in code (in-memory FAQ DB and conversation history) matches that minimal footprint.
Persistence & Privilege
The skill does not request persistent presence (always:false) and does not modify other skills or system-wide settings. Conversation history is kept only in memory; no persistent storage or elevated privileges are used.
Assessment
This skill is coherent and appears to be a simple local Python chatbot: it needs python3 and runs the included script without contacting external services or requesting secrets. Before installing or using it in production, consider: (1) the source/author is unknown — review the code yourself or prefer a vetted source; (2) it stores conversation only in memory and has no access controls, so do not feed sensitive PII unless you accept that risk; (3) the intent/sentiment detection is simple keyword-based (not robust) — for real deployments you may need better NLP, persistence, logging, and privacy controls; and (4) if you later add integrations (databases, APIs, or cloud services), require appropriate credentials and audit those changes.

Like a lobster shell, security has layers — review code before you run it.

aivk97espbye64drkzvm7gf2mtda18247hachatbotvk97espbye64drkzvm7gf2mtda18247hacustomer-servicevk97espbye64drkzvm7gf2mtda18247halatestvk97espbye64drkzvm7gf2mtda18247ha

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

Runtime requirements

💬 Clawdis
Binspython3

Comments