Ai Intelligent Customer Segmentation
v1.0.0客户分层，RFM分析 + 精准营销。
0· 140·1 当前·1 累计
by 安全扫描
OpenClaw
可疑
medium confidenceThe skill's description matches a customer-segmentation tool, but the runtime instructions ask you to clone and run code from GitHub while the registry metadata declares no install requirements — this mismatch and the implicit execution of external code warrant caution.
评估建议
This skill appears to be a customer-segmentation tool, but the SKILL.md tells you to clone and run a GitHub repo even though the registry lists no install requirements — that mismatch and the fact you'll execute external code are the main risks. Before installing or running anything: (1) inspect the GitHub repository and commit history to confirm the maintainer and review source code for network calls or credential usage; (2) run in an isolated environment (container or VM) and do not run as roo...详细分析 ▾
ℹ 用途与能力
The name/description (RFM 客户分层与精准营销) align with the listed tech stack (Python + FastAPI) and the SKILL.md install steps (git clone, pip install, python app.py). However the registry metadata lists no required binaries or install spec while the instructions clearly assume git, pip and python are available — that's an inconsistency that should be clarified.
⚠ 指令范围
SKILL.md instructs cloning a GitHub repository and running its Python app (pip install -r requirements.txt; python app.py). Those instructions will cause downloading and executing third‑party code; the file does not request environment variables or file system reads beyond running the app, but executing external code expands the skill's effective scope and risk.
⚠ 安装机制
There is no formal install spec in the registry, but SKILL.md contains manual install commands that fetch code from GitHub. Pulling and running code from an external repo is a high-impact action — GitHub is a common host (reduces some risk) but the repo/maintainer's trustworthiness is not established in the metadata (source/homepage unknown).
✓ 凭证需求
The skill declares no required environment variables or credentials and SKILL.md does not request any secrets. That is proportionate to a standalone analysis app. Note: the runtime instructions implicitly require network access and local execution privileges (git/pip/python), which were not declared.
✓ 持久化与权限
The skill is not marked always:true and does not request persistent system-wide configuration or access to other skills. There is no evidence it modifies other skills or agent settings.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/3/18
- Initial release of AI智能客户分层系统. - Features automated RFM analysis, customer tagging, profiling, marketing strategies, and conversion tracking. - Supports multiple pricing tiers for different business sizes. - Built with Python and FastAPI; easy installation instructions included.
● 无害
安装命令 点击复制
官方npx clawhub@latest install ai-intelligent-customer-segmentation
镜像加速npx clawhub@latest install ai-intelligent-customer-segmentation --registry https://cn.clawhub-mirror.com
数据来源：ClawHub ↗ · 中文优化：龙虾技能库
OpenClaw 技能定制 / 插件定制 / 私有工作流定制
免费技能或插件可能存在安全风险，如需更匹配、更安全的方案，建议联系付费定制