← 返回 Skills 市场

业务运营问答助手

Name: 业务运营问答助手
Author: imbing

作者 BING · GitHub ↗ · v0.0.1

cross-platform ⚠ suspicious

399

总下载

当前安装

版本数

在 OpenClaw 中安装

/install bo-faq-bot

功能描述

Build and query a FAQ knowledge base from markdown files. Use when asked to create a FAQ bot, set up automatic answers, build a knowledge base, add FAQ entri...

使用说明 (SKILL.md)

Feishu FAQ Bot

Build a searchable knowledge base from markdown files. Match incoming questions to the best FAQ answer using fuzzy text matching.

Quick Start

# Initialize a new FAQ knowledge base
python scripts/faqbot.py init

# Add a FAQ entry interactively
python scripts/faqbot.py add -q "What are your business hours?" -a "We are open Monday to Friday, 9 AM to 6 PM CET."

# Import FAQs from a markdown file
python scripts/faqbot.py import faq-source.md

# Search for the best matching answer
python scripts/faqbot.py search "when are you open"

# List all FAQ entries
python scripts/faqbot.py list

# Export all FAQs to markdown
python scripts/faqbot.py export --format md -o faqs-export.md

# Export as JSON
python scripts/faqbot.py export --format json -o faqs.json

# Remove a FAQ entry by ID
python scripts/faqbot.py remove 3

# Get stats about the knowledge base
python scripts/faqbot.py stats

Commands

Command	Args	Description
`init`		Create a new empty knowledge base
`add`	`-q QUESTION -a ANSWER [-t TAGS]`	Add a single FAQ entry
`import`	`\x3Cfile.md>`	Import FAQs from markdown (H2 = question, body = answer)
`search`	`\x3Cquery> [--top N] [--threshold T]`	Find best matching answer(s)
`list`	`[--tag TAG]`	List all FAQ entries
`remove`	`\x3Cid>`	Remove a FAQ entry
`export`	`[--format md\|json] [-o FILE]`	Export knowledge base
`stats`		Show knowledge base statistics

Markdown Import Format

## What are your business hours?
We are open Monday to Friday, 9 AM to 6 PM CET.
Weekend support is available via email only.

## How do I reset my password?
Go to Settings > Account > Reset Password.
You will receive an email with a reset link.

## What payment methods do you accept?
We accept:
- Credit/debit cards (Visa, Mastercard)
- PayPal
- Bank transfer (EU only)

Each H2 heading becomes a question, the body below becomes the answer.

Search Scoring

Uses TF-IDF-like fuzzy matching on question text
Returns confidence score (0.0 to 1.0)
Default threshold: 0.3 (adjustable with --threshold)
Returns top 3 matches by default (adjustable with --top)

Integration with OpenClaw

This skill is designed to work as a Feishu FAQ bot. When a user asks a question, the agent can use the search command to find the best match and respond automatically. Configure it in your cron or agent system prompt.

安全使用建议

This skill appears to do exactly what it says: create and search a local FAQ built from markdown. It stores data by default in ~/.faq-bot (overridable via FAQ_BOT_DIR), reads any markdown file you pass to the import command, and does not call external services or require credentials. Before installing or running: review the included scripts if you want to audit behavior; be aware it will create files under your home directory and will write export files to paths you provide; if you don't trust the publisher, run it in a sandbox or isolated account. Also note the README/code refer to an optional FAQ_BOT_DIR env var that isn't listed in the skill metadata — this is benign but worth knowing.

功能分析

Type: OpenClaw Skill Name: bo-faq-bot Version: 0.0.1 The skill is classified as suspicious due to significant local file inclusion (LFI) and arbitrary file write vulnerabilities present in `scripts/faqbot.py`. The `cmd_import` function allows reading content from arbitrary file paths (e.g., `/etc/passwd`, `~/.ssh/id_rsa`) if an AI agent is prompted to do so. Similarly, the `cmd_export` function allows writing the knowledge base content to arbitrary file paths, which could be leveraged for data exfiltration, persistence, or privilege escalation if an attacker can control the output path via prompt injection against the agent. While the script itself does not exhibit malicious intent, these capabilities create a high-risk attack surface.

能力评估

✓ Purpose & Capability

Name/description, README, SKILL.md, and the included script all align: a local FAQ builder/searcher. No unrelated binaries, cloud credentials, or external services are requested.

✓ Instruction Scope

SKILL.md instructs the agent to run the included CLI commands (init, add, import, search, list, export, remove, stats). The instructions and code operate on user-supplied markdown and a local knowledge-base file; they do not instruct reading unrelated system-wide secrets or sending data to external endpoints.

✓ Install Mechanism

There is no install spec and no network download/install steps. The skill is instruction-only with a bundled pure-Python script (standard library only), so nothing is fetched from remote URLs during install.

ℹ Credentials

The skill declares no required environment variables or credentials (correct). The code does read an optional FAQ_BOT_DIR env var to override the default storage path (~/.faq-bot); this is harmless but is not listed in requires.env — a small documentation inconsistency.

✓ Persistence & Privilege

always:false and user-invocable: normal. The script stores data in the user's home directory (~/.faq-bot) by default and can write export files where the user specifies; it does not modify other skills or system-wide agent configuration.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install bo-faq-bot
安装完成后，直接呼叫该 Skill 的名称或使用 /bo-faq-bot 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v0.0.1

Initial release of bo-faq-bot: a tool for building and querying a FAQ knowledge base from markdown files. - Create, import, and manage FAQs with simple script commands. - Fuzzy search matches user questions to the best FAQ answers with confidence scoring. - Supports importing from markdown, exporting to markdown or JSON, and listing/stats of FAQs. - Designed for integration with Feishu (Lark/飞书) business bots.

元数据

Slug bo-faq-bot

版本 0.0.1

许可证 —

累计安装 0

当前安装数 0

历史版本数 1

常见问题