Ai Intelligent Feedback Collection

用户反馈收集，问卷 + 分析 + 改进。

Security Scan

The skill's description matches a feedback-collection app, but the runtime instructions tell you to clone and run arbitrary code from GitHub (pip install + python app.py) without checks — this is potentially risky and should be reviewed before running.

Purpose & Capability

Name, description, features and declared tech stack (Python + FastAPI, survey, sentiment analysis) are internally consistent with a feedback collection system; the skill does not request unrelated credentials or tools.

Instruction Scope

SKILL.md is an instruction-only file and does not ask the agent to read unrelated files or environment variables. However it explicitly instructs operators to run 'git clone', 'pip install -r requirements.txt' and 'python app.py' — which delegates substantial discretion to remote code at runtime.

Install Mechanism

There is no formal install spec in the registry, but the README-like SKILL.md instructs cloning a GitHub repo and running pip/python. That causes arbitrary third-party code to be downloaded and executed with no checksums, pinned versions, or sandboxing. Even though GitHub is a common host, running unreviewed code/requirements is a high-risk action.

Credentials

The skill declares no required environment variables or credentials. That said, the cloned application (unknown repo) could request API keys or other secrets at runtime — the SKILL.md does not document any such needs.

Persistence & Privilege

The skill is not always-enabled and is user-invocable (normal). However the installation instructions launch an app (python app.py) which may run a persistent server and open network ports; the SKILL.md does not describe network exposure, ports, or how long the service runs.

What to consider before installing

This skill appears to be what it says, but the SKILL.md tells you to clone and run code from GitHub without verification. Before installing or running it: (1) Inspect the repository contents (especially requirements.txt and app.py) to understand what the code does and what network endpoints it contacts; (2) Run pip install and python app.py only inside an isolated environment (container/VM) or virtualenv, not as root and not on a machine with sensitive data or credentials; (3) Check dependency versions and consider pinning or auditing requirements for malicious packages; (4) Verify the repository owner and review license and recent commits; (5) If you need to trust this in production, request a packaged install spec with checksums/pinning or ask the author for clarifying documentation about data flows and required secrets. If you cannot review the repo, treat this as untrusted code and avoid running it on sensitive systems.

AI 智能反馈收集系统

描述

用户反馈收集，问卷 + 分析 + 改进。

功能

• 反馈收集（多渠道）
• 问卷设计（可视化设计）
• 数据分析（自动分析）
• 情感分析（情感识别）
• 改进跟踪（问题跟踪）

定价

• 基础版：¥49/月（500 反馈/月）
• 专业版：¥199/月（5000 反馈/月）
• 企业版：¥799/月（无限反馈）

适用场景

• 客户反馈
• 产品调研
• 满意度调查
• 用户体验

技术栈

• Python + FastAPI
• 问卷系统
• 情感分析
• 数据分析

安装

git clone https://github.com/openclaw-skills/ai-intelligent-feedback-collection
cd ai-intelligent-feedback-collection
pip install -r requirements.txt
python app.py

---

创建：2026-03-13 作者：OpenClaw Skills Team