Ai Intelligent Employee Survey

员工调研，问卷 + 分析 + 报告。

Security Scan

The skill's SKILL.md instructs you to git-clone and run external GitHub code (pip install + python app.py) that is not included in the skill bundle, which is inconsistent and risky without further vetting.

Purpose & Capability

The name and description (employee survey, questionnaire + analysis + reports) match the declared tech stack (Python + FastAPI) and the installation steps. However, the skill package contains no code or install spec — instead the SKILL.md tells you to fetch a GitHub repository. That is plausible but inconsistent with an instruction-only skill that otherwise provides its runtime logic inline.

Instruction Scope

Runtime instructions tell the operator to run: git clone https://github.com/openclaw-skills/ai-intelligent-employee-survey; pip install -r requirements.txt; python app.py. Those steps fetch and execute remote code and install external Python packages; the SKILL.md does not require or list any environment variables, nor does it specify verifying repository origin, tag, or checksums. Asking the agent/operator to fetch and execute arbitrary external code is scope creep from a simple instructive description and increases risk.

Install Mechanism

There is no formal install spec in the skill metadata; the only install mechanism is the free-text instructions to clone a GitHub repo and pip-install dependencies. While GitHub is a common host, the instructions do not pin a release or commit, do not instruct verifying signatures/checksums, and pip install will pull packages from PyPI (potentially with install-time scripts). This is higher risk than an instruction-only skill that performs no external fetches.

Credentials

The skill does not request environment variables or credentials in its metadata, which is proportionate to the description. However, because this is an employee-survey system that will process potentially sensitive personnel data, absence of declared secrets does not eliminate privacy or data-exfiltration risks — the fetched code could require or send credentials or upload data to external endpoints not documented here.

Persistence & Privilege

The skill does not request always: true, nor does it declare any privileged or persistent agent modifications. The instructions would run a separate server (python app.py) if followed, but the skill itself does not request elevated platform privileges in the metadata.

Scan Findings in Context

[no_regex_findings] expected: The regex scanner found nothing because the skill bundle contains only SKILL.md (no code files). This is expected for an instruction-only package, but does not imply safety — the SKILL.md advises fetching external code which the scanner could not analyze.

What to consider before installing

This skill tells you to clone and run a GitHub repository that is not bundled with the skill — that is the main red flag. Before installing or running anything: 1) Inspect the GitHub repository and specific commit/branch the instructions point to; do not run master/main blindly. 2) Review requirements.txt and the repository code for network calls, credential exfiltration, or surprising install-time scripts. 3) Run the code in an isolated environment (VM or sandbox) and a Python virtualenv, not on a production host. 4) Prefer a pinned release (tag/commit) and checksum verification; ask the skill author for a homepage, maintainer contact, or packaged release. 5) Consider privacy: decide where survey data will be stored and who can access it; confirm the server does not upload responses to third-party endpoints. If you cannot verify the remote repository and its behavior, do not run these instructions on systems that contain sensitive data.

AI 智能员工调研系统

描述

员工调研，问卷 + 分析 + 报告。

功能

• 问卷设计（可视化设计）
• 匿名调研（隐私保护）
• 数据分析（自动分析）
• 报告生成（自动生成）
• 改进跟踪（问题跟踪）

定价

• 基础版：¥49/月（5 调研/月）
• 专业版：¥199/月（50 调研/月）
• 企业版：¥799/月（无限调研）

适用场景

• 员工满意度
• 组织诊断
• 意见收集
• 改进跟踪

技术栈

• Python + FastAPI
• 问卷系统
• 数据分析
• 报告生成

安装

git clone https://github.com/openclaw-skills/ai-intelligent-employee-survey
cd ai-intelligent-employee-survey
pip install -r requirements.txt
python app.py

---

创建：2026-03-13 作者：OpenClaw Skills Team