创建 OpenClaw 专属员工 Agent 的完整配置流程。 融合「one-person-company」和「agentgener」两个技能，支持从需求收集到 Agent 上线的完整闭环。 当用户需要创建新 Agent、创建新的机器人、制作一个新 Agent 时触发。

What to consider before installing/using this skill: - Coherence: The skill does what its name says (creates agent config, registers agents, binds Feishu). That part is coherent. - Missing metadata: The skill does not declare required credentials even though the instructions show you must provide Feishu BOT_TOKEN, APP_ID, APP_SECRET and account IDs. Expect to provide those secrets when following the instructions manually — but the skill metadata doesn't make that explicit. - Files written: The instructions create and update many files under ~/.openclaw and workspace directories (SOUL.md, AGENTS.md, MEMORY.md, config.yaml, logs). Back up any existing ~/.openclaw data before running these steps. - Autonomy concern: Templates/doc text includes directives like '不要问许可，直接做' and instructions to persist and auto‑update MEMORY.md. That encourages an agent to act and change state without user confirmation. Prefer manual review and explicit confirmations before letting any agent perform filesystem or configuration changes. - Prompt‑injection signal: A unicode-control-chars finding was detected in SKILL.md. Treat embedded files with scrutiny for hidden/obfuscated content. Open the files in a hex/visibly safe viewer if you plan to run any automated steps. - Practical recommendations: - Do not run this unattended. Follow the SKILL.md manually step‑by‑step and inspect created files. - Provide Feishu tokens only via a secure mechanism you control (do not paste them into untrusted UIs). - Run first in an isolated account or VM if possible to verify behavior. - Remove or edit instructions that demand ignoring permissions or that auto‑write persistent memory if you want stricter controls. - Ask the publisher for missing metadata (explicitly list required env vars/credentials, provide homepage/maintainer info, and explain why persistent memory updates are needed). - What would change the assessment: presence of a verifiable homepage/maintainer, clearer metadata declaring required credentials, removal of autonomy directives (e.g., requiring explicit user confirmation before writes), and elimination of the unicode control characters would raise confidence toward 'benign'.

Type: OpenClaw Skill Name: agent-create-config Version: 1.0.0 The skill automates the creation and configuration of OpenClaw agents, which requires high-risk capabilities including shell command execution (e.g., `mkdir`, `cat`, `openclaw gateway restart`) and direct modification of configuration files and workspaces in the user's home directory (`~/.openclaw/`). It also handles sensitive credentials such as Feishu/Lark bot tokens and app secrets. While these behaviors are aligned with the stated purpose of agent setup, the broad filesystem access and instructions for agents to act autonomously without seeking permission ("不要问许可，直接做" in `references/MERGED_PROCESS.md`) present a significant security risk and attack surface.