📦 小爱舆情AI标注（OpenAI兼容）— 飞书多维表AI标注
v1.2.0基于OpenAI兼容接口，为飞书多维表中的未标注记录增量添加类型、情感、竞品提及、平台、品牌安全与内容安全等字段，实现舆情数据快速AI标注。
1· 220·0 当前·0 累计
by 下载技能包
最后更新
2026/4/21
安全扫描
OpenClaw
可疑
high confidenceNULL
评估建议
This package will read records from your Feishu bitable and (per code) requires you to provide APP_ID and APP_SECRET to write labels back — that part aligns with its purpose. However, the runtime wrapper currently enforces providing OPENAI_API_KEY, OPENAI_BASE_URL and OPENAI_MODEL, and will send the record text to whatever model gateway you configure. SKILL.md does not declare these required inputs nor does the declared network permission allow arbitrary LLM hosts. Before installing or running: ...详细分析 ▾
⚠ 用途与能力
The skill's stated purpose (incremental labeling of Feishu bitable rows) legitimately requires Feishu app credentials (APP_ID/APP_SECRET) and access to open.feishu.cn. However, the packaged wrapper (label_skill.py) requires OPENAI_API_KEY, OPENAI_BASE_URL and OPENAI_MODEL as mandatory, even though SKILL.md and README present use of an internal/stdin fallback as an option. Requiring an external LLM gateway is disproportionate to the declared inputs/description without explicit documentation in SKILL.md.
⚠ 指令范围
SKILL.md lists network permission only for https://open.feishu.cn and describes an optional stdin fallback. The code will call an arbitrary OPENAI_BASE_URL (user-provided) for model calls and enforces the presence of those credentials, meaning it will transmit record text to a third‑party model gateway. SKILL.md does not declare the openai_* inputs, nor does the permission block allow arbitrary LLM endpoints — this is a mismatch that could cause unexpected external data transmission.
✓ 安装机制
No install spec; code is provided as Python files and runs via python label_skill.py. There is no external archive download or opaque installer. That lowers install risk compared with network installers.
⚠ 凭证需求
The skill requires Feishu app credentials (appropriate for writing back to the bitable) but also requires OpenAI gateway credentials (OPENAI_API_KEY/OPENAI_BASE_URL/OPENAI_MODEL) which are not declared in SKILL.md inputs and are mandatory in label_skill.py. Requiring an API key and an arbitrary gateway URL is high‑privilege relative to the simple labeling description and could expose user data to an untrusted LLM endpoint.
✓ 持久化与权限
Flags show always:false and no attempts to modify other skills or system configs. The skill does not request permanent inclusion or system-wide privileges beyond using network and local prompt files included in the package.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.2.02026/3/17
NULL
● 无害
安装命令
点击复制官方npx clawhub@latest install yuqing-label-skill
镜像加速npx clawhub@latest install yuqing-label-skill --registry https://cn.longxiaskill.com镜像同步中