以明朝内阁制为蓝本的多 Agent 协作系统 - 一键部署你的 AI 朝廷

This package is largely a collection of OpenClaw configuration templates and agent prompt identities; it matches its stated purpose but carries operational risks you should address before using it: - Inspect configs before copying: do not blindly cp templates to ~/.openclaw. Back up your current ~/.openclaw/openclaw.json first. - Secrets handling: the templates expect Feishu appId/appSecret and LLM API keys inside the JSON. Avoid storing long‑lived secrets in plaintext in repo files; use a secrets manager or environment variables where possible and remove secrets from any repository clones. - Channel visibility: the SKILL explicitly says workflow/dispatch is public in channels. Using public group channels to coordinate actions or push diffs can leak secrets (DB connection strings, API keys, code containing secrets). Configure DM policies and channel access conservatively. - Minimize blast radius: create limited-scope Feishu apps/service accounts for bots (rotate credentials), and do not reuse high‑privilege credentials. Limit which agents can run with sandbox 'off' and avoid enabling wide subagent lists until you trust the deployment. - Verify provenance: the skill links to external GitHub repos (wanikua, danghuangshang). Review those repos and their Docker/deployment instructions before cloning or running them. - Run in isolated environment first: test in a non‑production VM or container, review what files/directories are created (workspaces under $HOME/clawd-*) and confirm webhooks endpoints and who can trigger them. If you want, I can: (1) list the exact files that will be overwritten/created from the templates; (2) produce a short checklist of configuration changes to harden secrets and channel visibility; or (3) review the linked GitHub repos for suspicious contents if you provide their URLs.

Type: OpenClaw Skill Name: ai-court Version: 2.3.0 The bundle is a comprehensive multi-agent orchestration framework themed around historical Chinese government structures (Ming/Tang Dynasties) and modern corporate hierarchies. It provides configuration templates for Feishu and Discord integration, defining specialized roles for task dispatching, prompt optimization, and code review. While several agents are configured with sandboxing disabled (e.g., in configs/feishu-ming/openclaw.json), this appears to be a functional requirement for their stated purposes (DevOps, system administration, and agent management) rather than a malicious backdoor. The instructions in SKILL.md and SOUL.md focus on maintaining the role-play hierarchy and operational efficiency without any evidence of exfiltration, persistence, or harmful prompt injection.