Discord自动化管理Skill

基于DeepSeek v4的Discord自动化管理系统，提供消息、用户、频道管理及数据分析，提升社区运营效率和活跃度。

Security Scan

The skill's description matches a Discord automation bot, but there are multiple inconsistencies (missing declared credentials, dependency mismatches, and differing runtime behavior) that warrant caution before installing or providing secrets.

Purpose & Capability

The skill claims to be a Discord automation framework (message/user/channel management, moderation, backups) which legitimately requires a Discord bot token/clientId/guildId and dependencies like discord.js. However the registry metadata declares no required environment variables or primary credential, and package.json has no dependencies — a mismatch between stated purpose and declared requirements.

Instruction Scope

SKILL.md instructs creating a config file containing a Discord bot token, clientId and guildId and shows code using process.env.DISCORD_TOKEN and real Discord operations (sendMessage, kickUser, etc.). The shipped index.js is a local simulator that does not actually call Discord APIs. This mismatch (instructions describing real networked bot vs shipped code being a simulator) is potentially misleading and grants the user cause to provide sensitive tokens without clear need.

Install Mechanism

There is no install spec (instruction-only), which is lower risk, but SKILL.md recommends installing discord.js and cloning a gitee repo. package.json lists no dependencies and the published files contain no network install steps. The mismatch between documentation (discord.js, node-cron) and package.json is inconsistent and may indicate sloppy packaging or missing code.

Credentials

SKILL.md and examples require a Discord bot token and IDs (sensitive credentials) but the skill metadata does not declare any required env vars or primary credential. The skill also documents high-privilege permissions (manageRoles, kickMembers, banMembers). Asking users to provide such sensitive tokens without declaring them in metadata or clarifying where/how they will be stored/transmitted is disproportionate and risky.

Persistence & Privilege

The skill does not request always:true and does not declare any special config paths or system-level changes. It is user-invocable and can be invoked autonomously per platform defaults, which is normal. The shipped code does not persist or modify other skills or system configs.

What to consider before installing

This package appears to be a Discord bot framework but has inconsistent packaging and documentation. Before installing or supplying credentials: - Do not paste your real Discord bot token into the public config until you confirm the package will actually use it securely. The skill's metadata does not declare required env vars even though SKILL.md asks for a token. - Verify whether the code will call the real Discord API. The included index.js is a local simulator (no network calls). If you expect real bot behavior, request an updated release that depends on discord.js and shows the real API usage. - Treat a Discord bot token as sensitive: the permissions shown (manageRoles, kick/ban) are powerful. Create a test bot with limited permissions for evaluation. - Confirm the source/trustworthiness: the SKILL.md references a gitee repo but the registry source/homepage are unknown. Prefer packages from a known repository or maintainers you trust. - Ask the maintainer to: (1) declare required env vars/primary credential in metadata, (2) include correct dependencies in package.json, and (3) clarify whether the skill performs network I/O or only local simulation. Given the mismatches, this is likely sloppy packaging rather than clearly malicious code, but you should not provide production credentials or install into a production environment until the above are resolved.

🚀 概述

基于惠迈智能体三层架构的社区管理框架，提供Discord服务器的全方位自动化管理接入点，开发者可基于此框架集成AI能力。

🌟 核心亮点

• 惠迈智能体协作模式：将惠迈三层智能体架构应用于国际社区运营
• 三层架构实践：监控智能体、分析智能体、执行智能体协同工作
• 可扩展设计：预留AI服务接口，支持接入各类大语言模型或自动化服务
• 效率革命：传统社区管理需要多人团队，现在只需智能体协作

🏆 用户价值

• 运营效率提升10倍：自动化处理90%的日常管理任务
• 社区活跃度+300%：智能互动提升用户参与度
• 国际化支持：多语言智能处理，支持全球社区
• 三层架构保障：监控智能体、分析智能体、执行智能体协同工作

功能特性

• 消息自动化：自动发送、回复、管理消息
• 用户管理：用户角色管理、权限控制
• 频道管理：频道创建、配置、管理
• 数据分析：服务器活动分析、用户行为分析
• 社区运营：欢迎消息、规则执行、活动管理
• 集成扩展：预留AI/外部服务集成接口

安装

# 通过ClawHub安装
clawhub install huimai-discord-automation

# 或手动安装
npm install discord-automation

配置

创建配置文件 config/discord-automation.json：

{
  "token": "YOUR_DISCORD_BOT_TOKEN",
  "clientId": "YOUR_CLIENT_ID",
  "guildId": "YOUR_SERVER_ID",
  "permissions": {
    "manageMessages": true,
    "manageChannels": true,
    "manageRoles": true,
    "kickMembers": true,
    "banMembers": true
  },
  "automation": {
    "welcomeMessages": true,
    "moderation": true,
    "activityTracking": true,
    "scheduledPosts": true
  }
}

使用方法

基本设置

const DiscordAutomation = require('discord-automation');

const bot = new DiscordAutomation({
  token: process.env.DISCORD_TOKEN,
  guildId: '123456789012345678'
});

// 启动机器人
bot.start();

消息管理

// 发送消息到指定频道
await bot.sendMessage('general', 'Hello from OpenClaw!');

// 回复特定消息
await bot.replyToMessage('message_id', 'This is a reply');

// 批量删除消息
await bot.deleteMessages('general', 10); // 删除最近10条消息

用户管理

// 分配角色
await bot.assignRole('user_id', 'member');

// 踢出用户
await bot.kickUser('user_id', '违反社区规则');

// 禁言用户
await bot.timeoutUser('user_id', 3600); // 禁言1小时

频道管理

// 创建新频道
const newChannel = await bot.createChannel('announcements', {
  type: 'text',
  topic: '重要公告',
  permissionOverwrites: []
});

// 配置频道权限
await bot.configureChannel('general', {
  slowmode: 5, // 5秒慢速模式
  nsfw: false
});

数据分析

// 获取服务器统计数据
const stats = await bot.getServerStats();
console.log(`总用户数: ${stats.totalMembers}`);
console.log(`活跃用户: ${stats.activeMembers}`);
console.log(`消息数量: ${stats.totalMessages}`);

// 用户行为分析
const userActivity = await bot.analyzeUserActivity('user_id');

在OpenClaw中使用

@agent 发送公告到Discord
@agent 查看Discord服务器状态
@agent 管理Discord用户角色
@agent 分析Discord活动数据

API参考

构造函数

new DiscordAutomation(config)

参数：

• config.token (string): Discord Bot Token
• config.clientId (string): 客户端ID
• config.guildId (string): 服务器ID
• config.permissions (object): 权限配置
• config.automation (object): 自动化配置

核心方法

start()

启动Discord机器人。

sendMessage(channelId, content, options)

发送消息到指定频道。

replyToMessage(messageId, content)

回复特定消息。

deleteMessages(channelId, limit)

批量删除消息。

assignRole(userId, roleName)

为用户分配角色。

kickUser(userId, reason)

踢出用户。

createChannel(name, options)

创建新频道。

getServerStats()

获取服务器统计数据。

analyzeUserActivity(userId)

分析用户活动数据。

事件处理

bot.on('messageCreate', (message) => {
  if (message.content === '!ping') {
    message.reply('Pong!');
  }
});

bot.on('guildMemberAdd', (member) => {
  member.send('欢迎加入我们的服务器！');
});

bot.on('messageDelete', (message) => {
  console.log(`消息被删除: ${message.id}`);
});

自动化功能

欢迎系统

自动发送欢迎消息给新成员，分配初始角色。

moderation系统

自动检测违规内容，执行规则。

定时任务

定时发送消息、执行清理任务等。

数据备份

定期备份服务器配置和数据。

依赖项

• discord.js: ^14.0.0
• node-cron: ^3.0.0

开发

# 克隆仓库
git clone https://gitee.com/yezhaowang888/huimai-skills.git

# 安装依赖
npm install

# 运行测试
npm test

# 启动开发服务器
npm run dev

贡献

欢迎提交Issue和Pull Request。

许可证

MIT License

版本历史

• v1.0.1 (2026-04-24): 修正描述，强调框架定位
• v1.0.0 (2026-04-22): 初始发布，基础自动化功能

支持

如有问题，请提交Issue或联系维护团队。