Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Discord自动化管理Skill

v1.0.0

基于DeepSeek v4的智能Discord自动化管理,实现消息、用户、频道自动化及数据分析,提升社区运营效率和活跃度。

0· 0·0 current·0 all-time
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
!
Purpose & Capability
The skill claims Discord automation (messages, roles, moderation) which legitimately requires a bot token and discord.js; SKILL.md documents a config file with token/clientId/guildId. However the registry metadata lists no required env vars or config paths and package.json has no dependencies. The omission of required credentials/deps from metadata is inconsistent.
Instruction Scope
SKILL.md stays within the Discord automation scope (create config with token, examples of sendMessage, role management, backups). It does not instruct the agent to read unrelated system files or exfiltrate data. However it refers to creating config/discord-automation.json and using process.env.DISCORD_TOKEN — these expected inputs are not declared in the skill metadata.
Install Mechanism
There is no install spec (instruction-only), reducing installation risk. The README suggests npm/clawhub and a GitHub repo URL, but the repo URL is a placeholder (your-org) and package.json lists no dependencies despite SKILL.md naming discord.js and node-cron — this mismatch is suspicious but not directly high-risk.
!
Credentials
The runtime requires sensitive secrets (Discord bot token, clientId, guildId) per SKILL.md/config example, but the skill metadata does not declare any required env vars or primary credential. The documentation requests permissions like ban/kick/manageRoles which legitimately need a bot token, so the absence of declared credentials in the manifest is disproportionate and inconsistent.
Persistence & Privilege
The skill does not request permanent/always-on inclusion, does not modify other skills or system settings, and has no install script that writes system-wide config. It appears to be a library module and a simulation implementation with no privileged platform flags.
What to consider before installing
This skill shows internal inconsistencies rather than obvious malicious code: SKILL.md expects a Discord bot token, clientId, guildId and lists dependencies (discord.js, node-cron), but the published metadata and package.json omit those requirements and dependencies. The included index.js is a local/simulated implementation that never calls the real Discord API, so the published behavior may not match the documentation. Before installing or providing any bot token: 1) verify the skill's source repository and maintainer (the README's GitHub URL is a placeholder); 2) confirm package.json correctly lists dependencies and inspect the published package contents; 3) don't supply production bot tokens to unverified packages — create a test bot account and test in an isolated server; 4) prefer skills that declare required credentials in metadata (primaryEnv) so permission requests are explicit; 5) if you need to trust this skill, ask the author to fix metadata (declare required env/config), publish a real repo URL, and explain why the index.js is a simulation. Additional information that would raise confidence: a real repository URL under a verifiable maintainer, package.json dependencies matching SKILL.md, and manifest listing required env vars (e.g., DISCORD_TOKEN) or a config path.

Like a lobster shell, security has layers — review code before you run it.

agent-collaborationvk9752a42agcv65t1ks5ytaw82n85b7mccommunity-managementvk9752a42agcv65t1ks5ytaw82n85b7mcdeepseek-v4vk9752a42agcv65t1ks5ytaw82n85b7mcefficiency-revolutionvk9752a42agcv65t1ks5ytaw82n85b7mchuimai-agentsvk9752a42agcv65t1ks5ytaw82n85b7mcinternational-communityvk9752a42agcv65t1ks5ytaw82n85b7mclatestvk9752a42agcv65t1ks5ytaw82n85b7mc
0downloads
0stars
1versions
Updated 4h ago
v1.0.0
MIT-0

Discord自动化管理Skill

🚀 概述

DeepSeek v4驱动的智能社区管理系统,基于惠迈智能体三层架构,提供Discord服务器的全方位自动化管理,提升社区运营效率10倍。

🌟 核心亮点

  • DeepSeek v4智能管理:AI驱动的消息分析、用户行为预测、智能 moderation
  • 惠迈国际社区实践:将惠迈智能体协作模式应用于国际社区运营
  • 超前技术配置:支持DeepSeek v4多模态社区分析
  • 效率革命:传统社区管理需要多人团队,现在只需智能体协作

🏆 用户价值

  • 运营效率提升10倍:自动化处理90%的日常管理任务
  • 社区活跃度+300%:智能互动提升用户参与度
  • 国际化支持:多语言智能处理,支持全球社区
  • 三层架构保障:监控智能体、分析智能体、执行智能体协同工作

功能特性

  • 消息自动化:自动发送、回复、管理消息
  • 用户管理:用户角色管理、权限控制
  • 频道管理:频道创建、配置、管理
  • 数据分析:服务器活动分析、用户行为分析
  • 社区运营:欢迎消息、规则执行、活动管理
  • 集成扩展:与其他系统集成

安装

# 通过ClawHub安装
clawhub install discord-automation

# 或手动安装
npm install discord-automation

配置

创建配置文件 config/discord-automation.json

{
  "token": "YOUR_DISCORD_BOT_TOKEN",
  "clientId": "YOUR_CLIENT_ID",
  "guildId": "YOUR_SERVER_ID",
  "permissions": {
    "manageMessages": true,
    "manageChannels": true,
    "manageRoles": true,
    "kickMembers": true,
    "banMembers": true
  },
  "automation": {
    "welcomeMessages": true,
    "moderation": true,
    "activityTracking": true,
    "scheduledPosts": true
  }
}

使用方法

基本设置

const DiscordAutomation = require('discord-automation');

const bot = new DiscordAutomation({
  token: process.env.DISCORD_TOKEN,
  guildId: '123456789012345678'
});

// 启动机器人
bot.start();

消息管理

// 发送消息到指定频道
await bot.sendMessage('general', 'Hello from OpenClaw!');

// 回复特定消息
await bot.replyToMessage('message_id', 'This is a reply');

// 批量删除消息
await bot.deleteMessages('general', 10); // 删除最近10条消息

用户管理

// 分配角色
await bot.assignRole('user_id', 'member');

// 踢出用户
await bot.kickUser('user_id', '违反社区规则');

// 禁言用户
await bot.timeoutUser('user_id', 3600); // 禁言1小时

频道管理

// 创建新频道
const newChannel = await bot.createChannel('announcements', {
  type: 'text',
  topic: '重要公告',
  permissionOverwrites: []
});

// 配置频道权限
await bot.configureChannel('general', {
  slowmode: 5, // 5秒慢速模式
  nsfw: false
});

数据分析

// 获取服务器统计数据
const stats = await bot.getServerStats();
console.log(`总用户数: ${stats.totalMembers}`);
console.log(`活跃用户: ${stats.activeMembers}`);
console.log(`消息数量: ${stats.totalMessages}`);

// 用户行为分析
const userActivity = await bot.analyzeUserActivity('user_id');

在OpenClaw中使用

@agent 发送公告到Discord
@agent 查看Discord服务器状态
@agent 管理Discord用户角色
@agent 分析Discord活动数据

API参考

构造函数

new DiscordAutomation(config)

参数:

  • config.token (string): Discord Bot Token
  • config.guildId (string): 服务器ID
  • config.permissions (object): 权限配置
  • config.automation (object): 自动化配置

核心方法

start()

启动Discord机器人。

sendMessage(channelId, content, options)

发送消息到指定频道。

replyToMessage(messageId, content)

回复特定消息。

deleteMessages(channelId, limit)

批量删除消息。

assignRole(userId, roleName)

为用户分配角色。

kickUser(userId, reason)

踢出用户。

createChannel(name, options)

创建新频道。

getServerStats()

获取服务器统计数据。

analyzeUserActivity(userId)

分析用户活动数据。

事件处理

bot.on('messageCreate', (message) => {
  if (message.content === '!ping') {
    message.reply('Pong!');
  }
});

bot.on('guildMemberAdd', (member) => {
  member.send('欢迎加入我们的服务器!');
});

bot.on('messageDelete', (message) => {
  console.log(`消息被删除: ${message.id}`);
});

自动化功能

欢迎系统

自动发送欢迎消息给新成员,分配初始角色。

moderation系统

自动检测违规内容,执行规则。

定时任务

定时发送消息、执行清理任务等。

数据备份

定期备份服务器配置和数据。

依赖项

  • discord.js: ^14.0.0
  • node-cron: ^3.0.0

开发

# 克隆仓库
git clone https://github.com/your-org/discord-automation.git

# 安装依赖
npm install

# 运行测试
npm test

# 启动开发服务器
npm run dev

贡献

欢迎提交Issue和Pull Request。

许可证

MIT License

版本历史

  • v1.0.0 (2026-04-22): 初始发布,基础自动化功能

支持

如有问题,请提交Issue或联系维护团队。

Comments

Loading comments...