← 返回 Skills 市场

飞书进化仪表盘

Name: 飞书进化仪表盘
Author: linbo405

作者 linbo405 · GitHub ↗ · v1.0.0 · MIT-0

cross-platform ⚠ suspicious

总下载

当前安装

版本数

在 OpenClaw 中安装

/install feishu-evolver-dashboard

功能描述

Feishu-integrated wrapper for the capability-evolver. Manages the evolution loop lifecycle (start/stop/ensure), sends rich Feishu card reports, and provides...

使用说明 (SKILL.md)

Feishu Evolver Wrapper

A lightweight wrapper for the capability-evolver skill. It injects the Feishu reporting environment variables (EVOLVE_REPORT_TOOL) to enable rich card reporting in the Master's environment.

Usage

# Run the evolution loop
node skills/feishu-evolver-wrapper/index.js

# Generate Evolution Dashboard (Markdown)
node skills/feishu-evolver-wrapper/visualize_dashboard.js

# Lifecycle Management (Start/Stop/Status/Ensure)
node skills/feishu-evolver-wrapper/lifecycle.js status

Architecture

Evolution Loop: Runs the GEP evolution cycle with Feishu reporting.
Dashboard: Visualizing metrics and history from assets/gep/events.jsonl.
Export History: Exports raw history to Feishu Docs.
Watchdog: Managed via OpenClaw Cron job evolver_watchdog_robust (runs lifecycle.js ensure every 10 min).
- Replaces fragile system crontab logic.
- Ensures the loop restarts if it crashes or hangs.

安全使用建议

This package contains many runtime scripts that read workspace memory and logs, manage daemons, and upload history/reports to Feishu. Before installing or running it: (1) Inspect and audit the included JS files (especially index.js, lifecycle.js, report.js, export_history.js, feishu-helper.js) to confirm they only send intended data. (2) Be aware the code expects Feishu credentials (app id / tokens) and a feishu_token.json file even though none are declared — avoid providing high-privilege credentials; use least-privilege tokens. (3) Run it in an isolated environment (container or sandbox) first — it can spawn daemons, write PID files, kill duplicate processes, and delete old logs/artifacts. (4) Backup any logs or memory files it may touch, and consider denying access to directories you don't want exported. (5) If you need to proceed, set conservative FEISHU tokens and review or stub feishu-common/index.js to ensure no unintended exfiltration occurs.

功能分析

Type: OpenClaw Skill Name: feishu-evolver-dashboard Version: 1.0.0 The skill bundle implements a complex self-evolution framework with high-risk capabilities, including automated Git synchronization (push/pull), management of OpenClaw cron jobs, and the spawning of sub-agents. Most notably, 'index.js' utilizes a dangerous 'new Function()' fallback to parse LLM-generated JSON, and 'lifecycle.js' dynamically generates and executes a Node.js script ('thinkScript') during its 'thinkPhase'. While these patterns are intended for autonomous operation and state management, they introduce significant Remote Code Execution (RCE) vulnerabilities if the agent's output or internal state files are compromised.

能力标签

cryptorequires-walletrequires-oauth-token

能力评估

⚠ Purpose & Capability

The skill claims to be a Feishu wrapper for the capability-evolver, which would legitimately need Feishu credentials and access to evolver state; however the registry metadata and SKILL.md list no required env vars or credentials. The code expects FEISHU_APP_ID, FEISHU_EVOLVER_DOC_TOKEN, OPENCLAW_MASTER_ID, a feishu_token.json file under memory, and reads .env. This mismatch between declared requirements and actual needs is concerning because users cannot see upfront what secrets the skill will use or require.

⚠ Instruction Scope

SKILL.md shows only simple CLI usage, but the included scripts do a lot: read logs and assets (assets/gep/events.jsonl, memory and logs), parse and truncate potentially sensitive content, create or append Feishu Docs, send interactive Feishu cards, run other local scripts via execSync/spawn, delete old error logs, and probe /proc for PIDs. The runtime therefore accesses many workspace files and transmits aggregated content to external Feishu APIs — behavior broader than the concise SKILL.md suggests and worth manual review.

ℹ Install Mechanism

No install spec (instruction-only skill) — lower install risk because nothing is downloaded at install time. However, the package includes many JS files that will be executed at runtime; there is no separate vetted install step, so the runtime code (which is present) must be reviewed carefully before allowing it to run.

⚠ Credentials

Although the registry lists no required environment variables or primary credential, the code depends on multiple env vars and on a local token file (feishu_token.json). It reads FEISHU_APP_ID, FEISHU_BOT_NAME, FEISHU_EVOLVER_DOC_TOKEN, OPENCLAW_MASTER_ID, EVOLVE_REPORT_TOOL, and other EVOLVE_* settings, and also loads .env. Requiring no declared secrets but using many in practice is disproportionate and hides the true credential needs from users.

ℹ Persistence & Privilege

The skill spawns and manages long-running processes (daemon/ensure loops), writes PID and heartbeat files, may kill duplicate processes (uses process.kill and /proc inspection), and writes to memory/log directories. These actions are consistent with lifecycle management but have real operational impact (can stop processes, delete stale logs). This is expected for a watchdog wrapper, but it is powerful enough that it should be run in a controlled environment and with explicit user consent.

如何使用

确保已安装 OpenClaw（本地或 Docker 部署）
在对话框中输入安装命令：/install feishu-evolver-dashboard
安装完成后，直接呼叫该 Skill 的名称或使用 /feishu-evolver-dashboard 触发
根据 Skill 的参数说明提供必要输入，即可获得结构化输出

版本历史

v1.0.0

Initial release: Feishu Evolver Wrapper - Integrates the capability-evolver skill with Feishu, enabling rich card reporting and dashboard visualization. - Provides lifecycle management tools to start, stop, check status, or ensure the evolution loop is running. - Allows generation of markdown dashboards and export of history data to Feishu Docs. - Includes a watchdog mechanism managed by OpenClaw, improving reliability over system crontab.

元数据

Slug feishu-evolver-dashboard

版本 1.0.0

许可证 MIT-0

累计安装 0

当前安装数 0

历史版本数 1

常见问题