Approval Engine

审批流程引擎 + 异常处理系统 — 规则驱动的多级审批、异常检测、自动恢复策略和 Discord 通知集成

This skill mostly does what it says (approval workflows, exception detection, Discord notifications), but before installing: - Expect to provide a Discord bot token (DISCORD_BOT_TOKEN) and channel IDs (DISCORD_APPROVALS_CHANNEL, DISCORD_ALERTS_CHANNEL, DISCORD_EXCEPTIONS_CHANNEL, DISCORD_RECOVERY_CHANNEL). The registry metadata currently does not list these — treat that as a documentation gap. - Keep the Discord bot token secret and grant the bot minimal permissions required to post messages and handle interactions. - The skill writes persistent files under the skill root (data/approvals.json, logs/approval.log, logs/exceptions.json). Run it in a directory where you control file access and rotation. - Because the skill sends requests to discord.com, confirm your environment allows outbound HTTPS and that you trust posting these messages to those channels. - Review the omitted/truncated source files (not provided here) for any additional network endpoints or unexpected behavior before running in production. - Test in a staging or sandbox environment first (the skill includes test/smoke-test.sh). The main actionable concern is the metadata/manifest inconsistency around required environment variables — that should be fixed or clarified before trusting deployment.

Type: OpenClaw Skill Name: ssa-approval-engine Version: 1.0.0 The skill bundle implements a comprehensive business approval and exception handling system with Discord integration. A critical security vulnerability exists in `src/rule-evaluator.js`, where the `evaluateApproverTriggerCondition` function uses `eval()` to process dynamic rule expressions; this could lead to Remote Code Execution (RCE) if an attacker can influence the input context (e.g., quotation data or customer names). While the code appears functionally aligned with its description and lacks clear evidence of intentional malice or data exfiltration, the use of unsafe evaluation logic and the handling of sensitive Discord bot tokens via environment variables pose a significant security risk.