Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

业务运营问答助手

v0.0.1

Build and query a FAQ knowledge base from markdown files. Use when asked to create a FAQ bot, set up automatic answers, build a knowledge base, add FAQ entri...

2· 384·0 current·0 all-time
byBING@imbing

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for imbing/bo-faq-bot.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "业务运营问答助手" (imbing/bo-faq-bot) from ClawHub.
Skill page: https://clawhub.ai/imbing/bo-faq-bot
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Canonical install target

openclaw skills install imbing/bo-faq-bot

ClawHub CLI

Package manager switcher

npx clawhub@latest install bo-faq-bot
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
Name/description, README, SKILL.md, and the included script all align: a local FAQ builder/searcher. No unrelated binaries, cloud credentials, or external services are requested.
Instruction Scope
SKILL.md instructs the agent to run the included CLI commands (init, add, import, search, list, export, remove, stats). The instructions and code operate on user-supplied markdown and a local knowledge-base file; they do not instruct reading unrelated system-wide secrets or sending data to external endpoints.
Install Mechanism
There is no install spec and no network download/install steps. The skill is instruction-only with a bundled pure-Python script (standard library only), so nothing is fetched from remote URLs during install.
Credentials
The skill declares no required environment variables or credentials (correct). The code does read an optional FAQ_BOT_DIR env var to override the default storage path (~/.faq-bot); this is harmless but is not listed in requires.env — a small documentation inconsistency.
Persistence & Privilege
always:false and user-invocable: normal. The script stores data in the user's home directory (~/.faq-bot) by default and can write export files where the user specifies; it does not modify other skills or system-wide agent configuration.
Assessment
This skill appears to do exactly what it says: create and search a local FAQ built from markdown. It stores data by default in ~/.faq-bot (overridable via FAQ_BOT_DIR), reads any markdown file you pass to the import command, and does not call external services or require credentials. Before installing or running: review the included scripts if you want to audit behavior; be aware it will create files under your home directory and will write export files to paths you provide; if you don't trust the publisher, run it in a sandbox or isolated account. Also note the README/code refer to an optional FAQ_BOT_DIR env var that isn't listed in the skill metadata — this is benign but worth knowing.

Like a lobster shell, security has layers — review code before you run it.

latestvk977xy6bxmyyn3n59dh2cxjked825wbf
384downloads
2stars
1versions
Updated 17h ago
v0.0.1
MIT-0

Feishu FAQ Bot

Build a searchable knowledge base from markdown files. Match incoming questions to the best FAQ answer using fuzzy text matching.

Quick Start

# Initialize a new FAQ knowledge base
python scripts/faqbot.py init

# Add a FAQ entry interactively
python scripts/faqbot.py add -q "What are your business hours?" -a "We are open Monday to Friday, 9 AM to 6 PM CET."

# Import FAQs from a markdown file
python scripts/faqbot.py import faq-source.md

# Search for the best matching answer
python scripts/faqbot.py search "when are you open"

# List all FAQ entries
python scripts/faqbot.py list

# Export all FAQs to markdown
python scripts/faqbot.py export --format md -o faqs-export.md

# Export as JSON
python scripts/faqbot.py export --format json -o faqs.json

# Remove a FAQ entry by ID
python scripts/faqbot.py remove 3

# Get stats about the knowledge base
python scripts/faqbot.py stats

Commands

CommandArgsDescription
initCreate a new empty knowledge base
add-q QUESTION -a ANSWER [-t TAGS]Add a single FAQ entry
import<file.md>Import FAQs from markdown (H2 = question, body = answer)
search<query> [--top N] [--threshold T]Find best matching answer(s)
list[--tag TAG]List all FAQ entries
remove<id>Remove a FAQ entry
export[--format md|json] [-o FILE]Export knowledge base
statsShow knowledge base statistics

Markdown Import Format

## What are your business hours?
We are open Monday to Friday, 9 AM to 6 PM CET.
Weekend support is available via email only.

## How do I reset my password?
Go to Settings > Account > Reset Password.
You will receive an email with a reset link.

## What payment methods do you accept?
We accept:
- Credit/debit cards (Visa, Mastercard)
- PayPal
- Bank transfer (EU only)

Each H2 heading becomes a question, the body below becomes the answer.

Search Scoring

  • Uses TF-IDF-like fuzzy matching on question text
  • Returns confidence score (0.0 to 1.0)
  • Default threshold: 0.3 (adjustable with --threshold)
  • Returns top 3 matches by default (adjustable with --top)

Integration with OpenClaw

This skill is designed to work as a Feishu FAQ bot. When a user asks a question, the agent can use the search command to find the best match and respond automatically. Configure it in your cron or agent system prompt.

Comments

Loading comments...