AI IT Helpdesk

企业 IT 服务台，工单管理 + 智能派单。

Security Scan

The skill's description and runtime instructions are internally consistent with an IT helpdesk, but it instructs you to clone and run external GitHub code without provenance or integrity guarantees and the registry metadata is incomplete — this mismatch and the implied arbitrary code execution are concerning.

Purpose & Capability

The name/description (enterprise IT helpdesk: ticketing, dispatch, KB, SLA, reports) match the SKILL.md content. The provided install/run commands (git clone, pip install, python app.py) are consistent with deploying a Python FastAPI helpdesk app.

Instruction Scope

The SKILL.md instructs the user to clone and execute a GitHub repository and run pip install -r requirements.txt and python app.py. Those instructions cause arbitrary third-party code to be installed and executed: the SKILL.md does not declare any required environment variables, credentials, database/config paths, or safety checks, nor does it pin releases or verify integrity. That broad runtime action exceeds what an instruction-only skill should assume without provenance.

Install Mechanism

There is no formal install spec in the registry; instead the README-style instructions pull code from https://github.com/openclaw-skills/ai-intelligent-helpdesk and install dependencies via pip. While GitHub is a common host, the instructions do not pin versions, verify checksums, or use a vetted release; pip installing arbitrary requirements can pull unreviewed packages. This is a moderate-to-high risk practice for an instruction-only skill.

Credentials

The skill declares no required environment variables or credentials, which is reasonable at face value for a pure spec. However, a real helpdesk app typically needs DB credentials, SMTP, or third-party API keys; the absence of declared env requirements combined with instructions to run external code means those needs (and any secrets handling) are unspecified and could be requested or harvested at runtime by the fetched code.

Persistence & Privilege

The skill does not request always:true and is user-invocable with normal autonomous invocation behavior. It does not include install hooks in the registry bundle and does not declare modifying other skills or agent configs. No elevated persistence is requested by the registry metadata.

What to consider before installing

This skill is mostly a README that tells you to clone and run a GitHub project — it appears coherent with an IT helpdesk but is risky because it causes arbitrary code to be installed and executed without provenance. Before installing: (1) inspect the referenced GitHub repository and requirements.txt for malicious or surprising code; (2) confirm the repository owner is trustworthy and check commit history/releases; (3) run installation and the app in an isolated environment (VM, container) and avoid using production secrets until you audit the code; (4) demand a published homepage, maintainer contact, and release tags or checksums from the publisher. The registry metadata also lists the source as 'unknown' while SKILL.md points at a repo and the manifest author strings differ — ask the publisher to reconcile these discrepancies before trusting the skill.

AI 智能服务台系统

描述

企业 IT 服务台，工单管理 + 智能派单。

功能

• 工单管理（创建/跟踪/关闭）
• 智能派单（自动分配）
• 知识库（自助服务）
• SLA 管理（服务级别）
• 报表分析（服务统计）

定价

• 基础版：¥99/月（100 工单/月）
• 专业版：¥499/月（1000 工单/月）
• 企业版：¥1999/月（无限工单）

适用场景

• IT 服务台
• 客服中心
• 内部支持
• 设备报修

技术栈

• Python + FastAPI
• 工单系统
• 智能派单算法
• 知识库集成

安装

git clone https://github.com/openclaw-skills/ai-intelligent-helpdesk
cd ai-intelligent-helpdesk
pip install -r requirements.txt
python app.py

---

创建：2026-03-13 作者：OpenClaw Skills Team