📦 wacai-index-official-website-demand-change — 官网需求一键变更
v1.0.0粘贴新需求与项目路径，自动完成分支检查、代码拉取、需求落库、代码修改、检查、Git commit/push，并推送企业微信通知，实现官网项目需求变更全流程自动化。
0· 277·0 当前·0 累计
by @shidengyun下载技能包
最后更新
2026/4/21
安全扫描
OpenClaw
可疑
medium confidenceThe skill largely does what it claims (save a demand file, prepare branch, commit/push, send a WeCom webhook) but includes surprising hard-coded paths and a built-in webhook URL that can leak repository path/commit info; it also instructs autonomous code modifications via a 'coding subagent' — all of which warrant caution before installing or running.
评估建议
Before installing or running this skill: 1) Review and replace the hard-coded SKILL_DIR path in scripts (it points at /Users/dyshi/...), otherwise scripts may fail or leak that path. 2) Treat the DEFAULT_WEBHOOK_URL as sensitive: it contains a webhook key and will receive project path and commit details by default — change it to your own webhook or require WECOM_WEBHOOK_URL to be set explicitly. 3) Understand that the workflow will run git add/commit/push using the host's git credentials — do no...详细分析 ▾
⚠ 用途与能力
The declared purpose (write demand file, run checks, git commit/push, notify via WeCom) matches the included scripts, but there are incoherences: multiple scripts hard-code SKILL_DIR to /Users/dyshi/.openclaw/... which contradicts the SKILL.md emphasis on not writing a fixed project path; the presence of a default WeCom webhook URL baked into the code is not documented in the skill metadata (no required env var declared). These choices are unexpected for a reusable skill.
⚠ 指令范围
SKILL.md instructs launching a 'coding subagent' to modify code based on the demand file — that gives the agent broad discretion to change arbitrary files under the provided project_dir. The scripts themselves perform git fetch/checkout/pull/add/commit/push and will send project path and commit details to a webhook. The workflow will therefore access local repo contents, commit history, and network-accessible endpoints; these actions go beyond simple file write and require explicit user consent and review.
✓ 安装机制
No install step or external downloads are present; the skill is delivered as scripts and a SKILL.md. Nothing is written to disk during installation by the skill package itself (the scripts operate at runtime).
⚠ 凭证需求
The package declares no required environment variables, yet push_wecom_push_notice.py uses a DEFAULT_WEBHOOK_URL constant with an embedded webhook key and will also accept a WECOM_WEBHOOK_URL environment override. That default URL will receive project path and commit information if used; the skill does not declare that it will transmit such data nor require an explicit webhook configuration. The scripts also implicitly rely on whatever git credentials are configured on the host for pushing — this is expected but sensitive and not documented in metadata.
✓ 持久化与权限
always:false and no mechanism that forces permanent inclusion. The skill does not attempt to modify other skills or global agent settings. It operates on a user-supplied project directory and calls local git; those are runtime actions, not persistent platform-wide privileges.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/3/10
- Initial release of "index-official-website-demand-change" skill for automating Wacai官网需求变更全流程。 - Supports one-click execution: checks git workspace, writes/backs up demand file, modifies code, runs checks, commits, pushes, and notifies via 企业微信 webhook. - Requires explicit project path, branch, and demand file from user input or context—refuses to proceed if missing. - Includes detailed enterprise WeChat notification with time, path, branch, commit info, and code changes after successful push. - Handles and reports all error cases: missing input, dirty workspace, git pull/check failures, push/notification failures. - Scripts for notification and git operations now parameterized by project path and branch, no hardcoded paths.
● 可疑
安装命令
点击复制官方npx clawhub@latest install wacai-index-official-website-demand-change
镜像加速npx clawhub@latest install wacai-index-official-website-demand-change --registry https://cn.longxiaskill.com