Syberz Chatflow Guardian

确保你的对话永远不会中断！智能监控对话状态，确保用户的消息永远不会是最后一条。

Security Scan

The skill claims to be a lightweight conversation monitor but its instructions and bundle ask you to run system-level scripts, install and run unreviewed Node code, and integrate with many chat platforms without declaring the required credentials — these mismatches warrant caution.

Purpose & Capability

The description promises multi-platform conversation monitoring (QQBot, WeCom, Slack, etc.) yet the registry metadata declares no required environment variables or primary credential. Real integrations with those platforms normally require API keys/tokens, so the skill's declared requirements are incomplete/unexplained. Additionally, the package contains substantial source code (src/, scripts/) despite being labelled as instruction-only in some metadata — an inconsistency.

Instruction Scope

SKILL.md instructs running npm install and many scripts, and explicitly tells users to run commands and scripts located under /root/.openclaw (deploy-no-cold-chat.sh, manage-no-cold-chat.sh), to enable systemd services, to inspect /root/.openclaw logs, and to run pkill/netstat/ps. These steps go beyond a simple skill sandbox and request system-level operations, file access, and service control that are outside the narrow scope of 'monitoring conversation state'.

Install Mechanism

There is no formal install spec in the registry, but README/SKILL.md direct you to run npm install and included install scripts. The package includes a package-lock.json and normal npm dependencies (node-cron, winston, lodash). package-lock entries reference a third-party mirror (mirrors.tencentyun.com) rather than only official registries — not necessarily malicious but worth verifying. No remote archive downloads or obscure URL installers were found in the provided content.

Credentials

The skill claims multi-platform integrations and deep-learning features but declares zero required environment variables/credentials. That is disproportionate: connecting to external platforms normally requires API keys/tokens, and running deep-learning models may require model files or storage access. SKILL.md also references config and log paths (~/.openclaw/config, ~/.openclaw/logs) which gives it access to user-level data but the registry didn't declare these as required config paths.

Persistence & Privilege

The skill does not set always:true, but its instructions ask you to create/enable a systemd service and run scripts with sudo and to read/write files under /root/.openclaw and ~/.openclaw. Those actions require elevated privileges and change system-level persistence (services, logs). While not automatically granted by metadata, the runtime instructions encourage high-privilege operations.

What to consider before installing

Do not run the provided install or deployment commands blindly. The package contains executable Node.js code and asks you to run npm install and system-level scripts (systemd enable/start, scripts under /root/.openclaw). Before installing: 1) Inspect src/index.js and other src/*.js for network calls, remote endpoints, hardcoded URLs, or any code that exfiltrates data; 2) Verify where the deploy/manage scripts referenced under /root/.openclaw actually come from — they are outside the repo and could be different on your host; 3) Confirm and provide only the minimal platform credentials required (avoid entering broad tokens as environment variables unless you audited the code); 4) Prefer running first in an isolated environment (container or VM) and run a dependency audit (npm audit) and antivirus/static analysis; 5) If you need to allow systemd/service installation, review those scripts carefully and avoid running sudo commands until you understand what they do. The main red flags are the mismatch between claimed platform integrations and missing credential declarations, and the instruction-driven request for system-level actions — treat this as potentially risky until source-reviewed.

【畅聊守护者】ChatFlow Guardian - 智能对话管理技能

确保你的对话永远不会中断！智能监控对话状态，确保用户的消息永远不会是最后一条。

English: ChatFlow Guardian - Keep your conversations flowing smoothly!

🎯 核心功能

基础功能

• 对话状态监控 - 每180秒检查一次对话状态
• 自动响应 - 当检测到对话可能中断时自动提供响应
• 进度汇报 - 长时间任务时自动汇报进度
• 消息补全 - 自动补全未完成的用户消息

三大增强功能

1. 多平台支持 - 兼容QQBot、企业微信、Slack、钉钉等8个平台
2. 预测性响应 - 基于历史对话预测用户需求，提前准备答案
3. 深度学习优化 - 神经网络提升意图识别准确率

🚀 快速开始

安装依赖

cd /root/.openclaw/workspace/skills/不冷场管家
npm install

运行测试

# 快速功能测试
node scripts/quick-all-test.js

# 完整演示
node scripts/enhanced-demo.js

部署使用

# 1. 运行部署脚本
bash /root/.openclaw/scripts/deploy-no-cold-chat.sh

# 2. 启动技能
bash /root/.openclaw/scripts/manage-no-cold-chat.sh start

# 3. 查看状态
bash /root/.openclaw/scripts/manage-no-cold-chat.sh status

⚙️ 配置说明

技能配置在config/local.json文件中，支持以下设置：

• 监控间隔时间
• 响应阈值
• 安静时段
• 支持的平台
• 预测性响应开关
• 深度学习优化配置

📊 技术架构

• 对话状态监控器: 基于时间的对话状态检查
• 平台适配器: 支持8个主流通讯平台
• 预测性响应引擎: 基于历史行为的智能预测
• 深度学习模块: 神经网络提升意图识别

🔧 开发文档

详细的开发文档请参考：

• QUICKSTART.md - 快速开始指南
• README.md - 详细使用说明
• CONTRIBUTING.md - 贡献指南
• CHANGELOG.md - 版本变更记录

---

ChatFlow Guardian - 让对话永远活跃！