Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Xiaodi Multi Team System

v1.0.1

小弟多团队协作系统 - 金融、电商、多媒体、办公四大团队 + 智能切换器

0· 66·0 current·0 all-time
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
Name/description (multi-team switcher: finance, e‑commerce, media, office) align with the requested tools (web_search, web_fetch, browser, memory_search, exec) and required binaries (ffmpeg/ffprobe/convert) — these are expected for web data gathering and media processing. Optional video API keys map to optional video-generation features.
Instruction Scope
SKILL.md explicitly restricts exec to media tools and browser to public pages; runtime instructions and the included Python/shell scripts operate on skill-local data files and perform web scraping, listing generation, media processing, and analysis. I did not find instructions that ask the agent to read arbitrary host system secrets or unrelated config paths.
Install Mechanism
No install spec is provided (instruction-only), so nothing is downloaded or installed automatically. The repository includes many scripts that run locally; this is expected for a bundled skill. There are no remote download URLs or extract actions in the manifest to raise additional install risk.
Credentials
No required environment variables or credentials are declared; a small set of optional API keys (KLING_API_KEY, RUNWAY_API_KEY, PIKA_API_KEY, OPENAI_API_KEY) are documented and limited to optional video-generation features. The set of env vars is proportionate to the optional capabilities described.
Persistence & Privilege
The skill does not request always:true and uses default autonomous-invocation behavior. It contains no instructions to modify other skills or global agent configuration. Scripts read and write data under the skill directory only (no evidence of attempting to modify other skills).
Assessment
This package appears internally consistent for a multi‑agent collaboration system. Before installing: (1) review and sandbox execution of the included scripts (they perform web scraping and media processing) — run them in an isolated environment if possible; (2) only set the optional API keys if you trust the services and understand they are used for AI video generation; (3) the skill requests exec/browser capabilities — be aware these allow running system commands and automating browsing (avoid exposing sessions/credentials to the agent); and (4) if you plan to use the finance/e‑commerce scraping features, check legal and platform scraping policies and consider configuring rate limits/proxies as suggested in the docs.

Like a lobster shell, security has layers — review code before you run it.

Runtime requirements

🤖 Clawdis
latestvk97bhp9zc8xb6ayj0p4pqn7gv583yaen
66downloads
0stars
1versions
Updated 2w ago
v1.0.1
MIT-0

🤖 小弟多团队协作系统

专业的 AI Agent 团队协作系统,四大功能团队 + 智能切换器,一键切换金融、电商、多媒体、办公场景。

📦 团队列表

团队图标功能角色数
金融团队📊股票分析、投资决策7
电商团队🛒选品、运营、定价8
多媒体团队🎬视频、图片、音频处理7
办公团队📋日程、邮件、文档4

总计:26 个专业 Agent 角色


⚙️ 系统要求

必需工具

工具用途安装命令
ffmpeg视频处理apt install ffmpegbrew install ffmpeg
ffprobe视频分析随 ffmpeg 安装
ImageMagick图片处理apt install imagemagickbrew install imagemagick

可选工具

工具用途安装命令
whisper语音识别/字幕生成pip install openai-whisper
akshareA股数据pip install akshare

权限说明

本技能需要以下工具权限:

  • web_search - 搜索网络信息
  • web_fetch - 获取网页内容
  • memory_search - 搜索记忆
  • exec - 执行系统命令(ffmpeg、ImageMagick 等)
  • browser - 浏览器自动化

🔐 数据源声明

金融数据(公开 API)

数据源用途认证
东方财富股票行情、财务数据无需认证
腾讯财经股票行情无需认证
新浪财经新闻、舆情无需认证

电商数据(公开 API)

数据源用途认证
亚马逊商品信息、BSR无需认证
TikTok商品信息无需认证

🔑 可选 API 配置

AI 视频生成功能需要配置以下环境变量(可选):

# 可灵 AI
export KLING_API_KEY=your_key

# Runway Gen-3
export RUNWAY_API_KEY=your_key

# Pika Labs
export PIKA_API_KEY=your_key

# OpenAI (Sora/DALL-E)
export OPENAI_API_KEY=your_key

注意:这些 API Key 仅用于 AI 视频生成,不配置不影响其他功能。


🚀 快速开始

安装

clawhub install xiaodi-multi-team-system

使用示例

# 金融场景
分析茅台的投资价值
诊断我的持仓

# 电商场景
帮我选品,类目:美妆护肤
监控竞品价格变化

# 多媒体场景
压缩这个视频 /path/to/video.mp4
提取视频第10秒的帧

# 办公场景
帮我安排明天下午3点的会议
整理这份文档

📋 团队详情

📊 金融团队

7 大角色协作:投顾专家、行业研究员、投行专家、市值管理助理、财富专员、商机助理、舆情助理

数据源:东方财富、腾讯财经、新浪财经(均为公开 API)

🛒 电商团队

8 大角色协作:选品专家、运营专员、定价专员、客服专员、数据分析师、竞品分析师、内容创作者、投放专员

数据源:亚马逊、TikTok(公开数据)

🎬 多媒体团队

7 大角色协作:视频剪辑师、视频创作师、字幕生成器、图片处理师、AI 绘图师、音频处理师、质量检查员

依赖:ffmpeg、ImageMagick、whisper(可选)

📋 办公团队

4 大角色协作:日程秘书、邮件秘书、文档秘书、会议秘书


⚠️ 安全声明

  1. exec 权限:仅用于调用 ffmpeg、ImageMagick 等媒体处理工具,不会执行任意危险命令
  2. browser 权限:仅用于获取公开网页数据,不会访问需要认证的私密页面
  3. API Key:所有 API Key 通过环境变量配置,不会硬编码或存储在代码中
  4. 数据安全:不读取主机敏感文件,不外传用户数据

📄 License

MIT License


👤 作者

xiaodi mxbot-xiaodi@agentmail.to


GitHub: https://github.com/mx6315909/xiaodi-multi-team-skills

Comments

Loading comments...