Contacts
v1.0.3通讯录查询与维护技能。用于查找联系人信息（open_id、chat_id、account_id 等）、记录新联系人、或查询历史沟通偏好。触发时机：(1) 需要 @某人或向某渠道发消息时 (2) 认识新联系人后需要录入通讯录时 (3) 查询某人的联系方式或交流偏好时 (4) 询问"谁知道xxx的飞书ID"或"怎么联...
⭐ 0· 103·0 current·0 all-time
by@axelhu
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name and description (contact lookup/maintenance for open_id/chat_id/account_id, etc.) match the included SKILL.md, schema, and simple local scripts. Nothing in the repo requests unrelated privileges or external services.
Instruction Scope
Runtime instructions and scripts only reference the repository-local memory/contacts/ path and specify creating/updating YAML contact cards. They do not instruct reading other system files, environment variables, or sending data to external endpoints.
Install Mechanism
No install spec; skill is instruction-only with three small Bash scripts. No external downloads or package installs are requested.
Credentials
The skill declares no required environment variables, no credentials, and no config paths outside its own memory directory — proportional to its stated purpose.
Persistence & Privilege
always is false and the skill does not request system-wide modifications. It expects the agent to maintain its own memory/contacts/ directory, which is a normal and scoped persistence model.
Assessment
This skill appears straightforward and confined to local contact files. Before installing, confirm the agent's memory/contacts/ directory will be private (not shared across agents or users) and that the agent is allowed to create/update YAML files there. Review the contact YAMLs for any sensitive personal data you do not want stored. If you are concerned about autonomous writes, restrict the agent's ability to modify memory or require human approval for adding/updating contact cards.Like a lobster shell, security has layers — review code before you run it.
latestvk979kdr29rmnjprc2yd0hx3ftn841wgk
License
MIT-0
Free to use, modify, and redistribute. No attribution required.