← 返回 Skills 市场
leegodamn

Kim Msg Account Skill

作者 LeeGoDamn · GitHub ↗ · v1.0.2
cross-platform ⚠ suspicious
408
总下载
0
收藏
0
当前安装
3
版本数
在 OpenClaw 中安装
/install kim-msg-account
功能描述
Kim 消息号配置助手 - 快手(Kuaishou/Kwai)IM 消息渠道集成工具。帮助用户安装和配置 Kim Channel 插件,实现通过 Kim(快手 IM)与 OpenClaw 进行消息交互。支持自动安装插件、交互式配置指引、以及可选的自动配置服务。
使用说明 (SKILL.md)

Kim Channel 配置助手

📝 文档作者: yuanyoucai(袁有财)
📚 完整图文版: https://docs.corp.kuaishou.com/d/home/fcAA_W4zGstwslCQxlwehh1d2

概述

本 skill 帮助你配置 OpenClaw 的 Kim 消息渠道插件,让你能通过 Kim(快手 IM)与 OpenClaw 进行消息交互。

核心能力:

  1. 🔧 自动安装 - 一键安装 Kim Channel 插件
  2. 📖 交互指引 - 分步骤引导配置
  3. 自动配置 - 如用户提供凭证,可直接完成配置

🚀 快速开始

方式 1:运行交互式脚本(推荐)

cd ~/.openclaw/workspace/skills/kim-msg-account
./scripts/interactive-setup.sh

脚本会:

  • ✅ 自动检查并安装插件
  • ✅ 交互式询问配置方式
  • ✅ 可选自动配置或手动指引

方式 2:对话式配置

直接告诉我要配置 Kim,我会一步步引导你!


🎯 交互流程

阶段 1:用户表达配置意愿

触发词: "配置 Kim"、"接入 Kim"、"Kim 消息号"、"kim channel"等

响应:

好的!我来帮你配置 Kim 消息渠道 💬

在开始之前,请问你:
1️⃣ 是否已经在 Kim 开放平台创建了应用?
2️⃣ 是否需要我从零开始指导你?

回复"从零开始"或"已有应用",我来安排下一步~

阶段 2A:用户选择"从零开始"

步骤 1:创建应用

📱 第一步:创建 Kim 应用

1. 访问 https://kim.kuaishou.com/
2. 点击"应用管理" → "创建应用"
3. 填写应用名称(如:OpenClaw)

完成后告诉我"创建好了"~

等待用户确认 → 发送步骤 2:

⚙️ 第二步:配置事件回调

1. 进入"事件和回调"配置页
2. 请求地址填写:`https://你的域名/kim`
3. Verification Token 点击刷新并记录下来
4. 添加两个事件:
   - ✅ 消息号收到消息
   - ✅ 群内的应用机器人收到消息

完成后告诉我"配置好了"~

等待用户确认 → 发送步骤 3:

🔑 第三步:获取 appKey 和 secretKey

1. 访问 OpenApi 服务平台
2. 找到你的应用 → 查看密钥
3. 复制 appKey 和 secretKey(预发/正式环境)

拿到后告诉我~

等待用户确认 → 发送步骤 4:

📝 第四步:申请接口权限

1. 在 OpenApi 平台点击"接入管理"
2. 创建申请 → 服务名称选择"KIM 开放能力"
3. 勾选接口:**发送 im 消息** `/openapi/v2/message/send`
4. 填写申请原因并提交

审批通过后告诉我"申请好了"~

阶段 2B:用户选择"已有应用"

响应:

太好了!那我们直接进入配置环节 🔧

请提供以下信息(如果有的话):
- appKey
- secretKey
- verificationToken
- webhookPath(默认 /kim)

💡 如果你愿意提供这些信息,我可以直接帮你配置到 OpenClaw 中
💡 如果不想提供,我也会一步步指导你自己配置

你希望:
1️⃣ 我帮你自动配置(需要提供凭证)
2️⃣ 你按照指引自己配置

阶段 3A:用户选择"自动配置"并提供凭证

用户提供信息后,执行:

# 1. 先检查插件是否安装
openclaw plugins list | grep kim

# 2. 如果未安装,先安装
openclaw plugins install @ks-openclaw/kim

# 3. 配置凭证
openclaw config set channels.kim.appKey "\x3C用户提供的 appKey>"
openclaw config set channels.kim.secretKey "\x3C用户提供的 secretKey>"
openclaw config set channels.kim.verificationToken "\x3C用户提供的 verificationToken>"
openclaw config set channels.kim.webhookPath "${webhookPath:-/kim}"

# 4. 重启网关
openclaw gateway restart

配置完成后发送:

✅ 配置完成!

已配置项:
- appKey: \x3CappKey 前 8 位>...
- secretKey: 已配置
- verificationToken: 已配置
- webhookPath: \x3CwebhookPath>

网关已重启,现在可以测试了!

在 Kim 中搜索你的消息号,发送"你好"试试~

阶段 3B:用户选择"自己配置"

发送配置命令指引:

好的!按照下面的步骤配置 🔧

### 第 1 步:检查插件是否安装
```bash
openclaw plugins list | grep kim

如果没安装,先运行:

export npm_config_registry="https://npm.corp.kuaishou.com"
openclaw plugins install @ks-openclaw/kim

第 2 步:配置凭证

openclaw config set channels.kim.appKey "\x3C你的 appKey>"
openclaw config set channels.kim.secretKey "\x3C你的 secretKey>"
openclaw config set channels.kim.verificationToken "\x3C你的 verificationToken>"
openclaw config set channels.kim.webhookPath "/kim"

第 3 步:重启网关

openclaw gateway restart

完成后告诉我,我帮你验证配置!


---

### 阶段 4:验证配置

**用户说"配置好了"后,执行:**
```bash
# 检查配置
openclaw config get channels.kim.appKey
openclaw config get channels.kim.secretKey
openclaw config get channels.kim.verificationToken
openclaw config get channels.kim.webhookPath

# 检查网关状态
openclaw gateway status

验证通过后发送:

✅ 验证通过!配置正确~

🎉 现在试试给 Kim 发消息吧!

在 Kim 中搜索你的消息号,发送"你好"或"测试"~

🔧 故障排查

问题 1:收不到消息

检查项:

# 1. 检查插件
openclaw plugins list | grep kim

# 2. 检查配置
openclaw config get channels.kim

# 3. 检查 webhook 可达性
curl -v https://你的域名/kim

# 4. 查看网关日志
openclaw logs

常见原因:

  • ⚠️ Kim Server 从 IDC 发出,办公网设备需要配置 AccessProxy
  • ⚠️ webhook 路径配置错误
  • ⚠️ verificationToken 不匹配

问题 2:无法发送消息

检查项:

# 检查接口权限
# 确认已在 OpenApi 平台申请 /openapi/v2/message/send 权限

# 检查 appKey/secretKey
openclaw config get channels.kim.appKey
openclaw config get channels.kim.secretKey

🛠️ 执行命令参考

安装插件

export npm_config_registry="https://npm.corp.kuaishou.com"
openclaw plugins install @ks-openclaw/kim

配置凭证

openclaw config set channels.kim.appKey "\x3CappKey>"
openclaw config set channels.kim.secretKey "\x3CsecretKey>"
openclaw config set channels.kim.verificationToken "\x3CverificationToken>"
openclaw config set channels.kim.webhookPath "/kim"
# 或者使用完整 URL
openclaw config set channels.kim.webhookUrl "https://你的域名/kim"

验证配置

# 检查插件
openclaw plugins list | grep kim

# 检查配置
openclaw config get channels.kim

# 检查网关状态
openclaw gateway status

重启网关

openclaw gateway restart

查看日志

openclaw logs

🛠️ 辅助脚本

交互式配置

./scripts/setup.sh

诊断配置状态

./scripts/diagnose.sh

安全使用建议
This skill appears to do exactly what it says: guide installation/configuration of a Kim channel for OpenClaw. Before using it, verify the following: (1) you trust the internal npm registry (https://npm.corp.kuaishou.com) and the plugin package @ks-openclaw/kim; (2) understand where OpenClaw stores credentials and whether they are encrypted (use Kconf or equivalent per org policy); (3) do not paste secrets into public chats—run the included scripts locally so secrets are entered on your machine; (4) review the plugin code/package (if possible) before installing; and (5) be aware the scripts may restart your OpenClaw gateway—schedule downtime if needed.
功能分析
Type: OpenClaw Skill Name: kim-msg-account Version: 1.0.2 This skill is classified as suspicious due to critical shell injection vulnerabilities present in `SKILL.md`, `scripts/interactive-setup.sh`, and `scripts/setup.sh`. These files directly embed user-provided input (such as appKey, secretKey, verificationToken, webhookPath) into `openclaw config set` commands without proper sanitization. This allows a malicious user to inject arbitrary shell commands, leading to potential Remote Code Execution (RCE) on the system running the OpenClaw agent. While the skill's stated purpose of configuring a Kim message channel is benign, this severe vulnerability makes it a high-risk component.
能力评估
Purpose & Capability
Name/description match the behavior: the skill checks/installs an OpenClaw plugin, guides the user to create a Kim app, and sets OpenClaw channel config. The only required binary is openclaw, which is appropriate. The scripts reference an internal npm registry and the @ks-openclaw/kim package which is consistent with installing the Kim plugin.
Instruction Scope
SKILL.md and scripts limit actions to plugin installation, interactive collection of appKey/secret/verificationToken/webhookPath, writing those into OpenClaw config, simple network checks (curl) to user-provided webhook URLs, and restarting the OpenClaw gateway. The scripts prompt locally for secrets and do not contain code that exfiltrates data to unexpected remote endpoints.
Install Mechanism
There is no external install spec (instruction-only plus local scripts). The scripts call 'openclaw plugins install @ks-openclaw/kim' and set npm_config_registry to an internal corporate registry (https://npm.corp.kuaishou.com). This is expected for a corporate plugin but means the package will be fetched from an internal registry rather than a public, third-party release host—verify you trust that registry and the @ks-openclaw/kim package contents before installing.
Credentials
The skill does not declare or require unrelated environment variables or external credentials. It legitimately requests the Kim app credentials (appKey, secretKey, verificationToken) from the user to configure OpenClaw. Note: the scripts write these secrets into OpenClaw config; confirm how OpenClaw stores/encrypts those values (README already recommends Kconf/encryption).
Persistence & Privilege
The skill is not always-enabled and does not request elevated platform privileges. It will (optionally) restart the local OpenClaw gateway as part of configuration—this is expected behavior for applying channel config and not an unexplained privilege.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install kim-msg-account
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /kim-msg-account 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.2
- Documentation updates only: updated README.md and SKILL.md files. - No changes to core functionality or behavior. - Existing instructions, usage flows, and troubleshooting details remain unchanged.
v1.0.1
- 更新文档链接为公司内部站点:https://docs.corp.kuaishou.com/d/home/fcAA_W4zGstwslCQxlwehh1d2 - 其他内容和功能说明保持不变,仅文档作者信息下的“完整图文版”链接进行修正 - 无其他用户可见变更
v1.0.0
- Initial release of Kim Channel configuration assistant for Kuaishou/Kwai IM integration. - Provides step-by-step interactive guides for plugin installation and configuration with OpenClaw. - Supports both automated configuration (with credentials) and manual guided setup. - Includes troubleshooting tips and utility scripts for installation, diagnosis, and validation. - Targets internal Kuaishou use; documentation available in Chinese with command references.
元数据
Slug kim-msg-account
版本 1.0.2
许可证
累计安装 1
当前安装数 0
历史版本数 3
常见问题

Kim Msg Account Skill 是什么?

Kim 消息号配置助手 - 快手(Kuaishou/Kwai)IM 消息渠道集成工具。帮助用户安装和配置 Kim Channel 插件,实现通过 Kim(快手 IM)与 OpenClaw 进行消息交互。支持自动安装插件、交互式配置指引、以及可选的自动配置服务。 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 408 次。

如何安装 Kim Msg Account Skill?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install kim-msg-account」即可一键安装,无需额外配置。

Kim Msg Account Skill 是免费的吗?

是的,Kim Msg Account Skill 完全免费(开源免费),可自由下载、安装和使用。

Kim Msg Account Skill 支持哪些平台?

Kim Msg Account Skill 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Kim Msg Account Skill?

由 LeeGoDamn(@leegodamn)开发并维护,当前版本 v1.0.2。

💬 留言讨论