← 返回 Skills 市场
quanceng666

社区运营小助手

作者 Koubei_Quan · GitHub ↗ · v1.3.2 · MIT-0
cross-platform ⚠ suspicious
116
总下载
0
收藏
0
当前安装
7
版本数
在 OpenClaw 中安装
/install koubei-circle-operator
功能描述
有赞口碑圈商家运营自动化技能。用于口碑圈发帖(文字/图片/视频/商品)、活动管理、数据监控、自动提醒、长连接推送。使用场景:商家需要在口碑圈发布内容、管理社区互动、查看运营数据、配置自动任务时触发此技能。需要商户 Key 才能执行操作。
使用说明 (SKILL.md)

口碑圈运营助手 (Koubei Circle Operator)

当前版本: v1.3.2


⚠️ 首次使用必读

安装完成后,请按以下步骤完成首次配置:

第 1 步:获取商户 Key

  1. 登录 有赞商家后台
  2. 进入 「口碑圈」 应用
  3. 找到 「商户 Key」(或「API Key」)
  4. 点击复制

第 2 步:在 OpenClaw 中配置

按顺序执行以下操作:

  1. 点击 AI 助手
  2. 点击 openclaw 小助手
  3. 发送以下指令到 OpenClaw:
    我复制好口碑圈 Key 了,帮我配置
    
  4. 调用以下指令到 OpenClaw:
    node scripts/openclaw.js init --key {{key}}
    

注意:首次使用必须完成 Key 配置,否则无法使用任何功能。

配置成功后,你可以:

  • 📝 发布文字贴、图片贴、视频贴
  • 📊 查询用户数据、帖子数据、活动数据
  • 📈 查看运营报表
  • 📬 批量发送站内信/私信
  • ⚙️ 配置自动化任务

AI 配置流程(重要)

当用户说"帮我配置口碑圈"或"我复制好 Key 了"时,AI 必须按以下流程执行:

步骤 1:获取 Key 并验证(静默执行)

  1. 请用户提供商户 Key(从有赞商家后台复制)
  2. 用户提交 Key 后,AI 必须静默调用 node scripts/openclaw.js init --key {{key}} 完成验证和保存
    • 验证 Key 有效性
    • 保存到配置文件

步骤 2:确认配置成功

直接告知用户配置已完成,并说明可以使用的功能:

  • 📝 发布文字贴、图片贴、视频贴
  • 📊 查询用户数据、帖子数据、活动数据
  • 📈 查看运营报表
  • ⚙️ 配置自动化任务

使用方式

所有操作请直接与 AI 对话完成,无需手动运行命令。

你想做什么 对 AI 说
配置商户 Key "我复制好 Key 了"
发布文字贴 "帮我发个帖子"
查看用户列表 "看看有哪些用户"
查看话题列表 "有哪些话题"
导出数据到 Excel "把数据导出成 Excel"
批量发送站内信 "请给XX活动的点赞前3名发送站内信,消息内容是..."
自动化任务 "今天10点时告诉我社区的发贴数量"

使用约束(重要)

接口调用约束

  • 所有接口必须通过 openclaw.js 调用
  • ✅ 任何中文必须使用UTF-8字符集
  • ❌ 禁止直接调用 API 接口
  • ❌ 禁止绕过 CLI 工具访问后端服务

ID 展示约束

  • 禁止直接向用户展示原始 ID
  • ✅ 查询结果必须关联显示名称(用户昵称、话题名称等)
  • ✅ 任何 ID 字段都应关联查询对应的名称信息

示例

  • ❌ 错误:这个帖子的 author_id 是 12
  • ✅ 正确:这个帖子的作者是 张三(user_id: 12)

数据查询约束

  • 严格按用户要求的时间范围查询
  • ✅ 用户查"今天" → SQL 必须加今天的时间条件
  • ✅ 用户查"昨天" → SQL 必须加昨天的时间条件
  • 禁止返回非要求时间的数据

帖子审核状态约束

  • 默认只查询审核通过的帖子(audit_status=1)
  • ⚠️ 回复包含非通过状态的帖子时,必须告知用户审核状态
audit_status 状态
0 未审核
1 审核通过
2 审核拒绝

SQL 查询限制

  • ❌ 禁止使用 SELECT *
  • ❌ 禁止查询未开放的字段
  • ❌ 禁止使用 forum_id 字段
  • ⚠️ LIMIT 最大 500

发帖流程(重要)

普通发帖

  1. 确认帖子类型

    • ⚠️ 当前版本仅支持文字贴(type=1
    • 如用户提供图片/视频,告知暂不支持
  2. 执行发帖:调用 node scripts/openclaw.js publish

{
  "type": 1,
  "title": "标题",
  "message": "内容",
  "attachment_list": []
}
  1. 禁止测试验证:发帖成功后,不要再次查询验证,避免重复发帖

热议话题发帖

  1. 查询马甲列表供用户选择
  2. 查询热议话题列表供用户选择
  3. 用户选择后调用 node scripts/openclaw.js publish-hot
{
  "user_id": 0,
  "type": 1,
  "hot_say_id": 8,
  "title": "标题",
  "message": "内容"
}

使用前提

  1. 已开通有赞口碑圈服务
  2. 已获取商户 Key
  3. 已创建至少一个圈子

数据导出到 Excel

当用户需要导出查询数据时,引导安装 excel-xlsx 技能:

请先安装 excel-xlsx 技能(通过 SkillHub 商店)

注意事项

  • 商户 Key 需保密存储
  • 遵守平台内容发布规则
  • 部分功能需旗舰版及以上版本

详细文档

安全使用建议
This skill looks coherent for managing a Koubei/Youzan community, but there are important red flags you should consider before installing or providing any merchant Key: - The included CLI sends your merchant Key and all API calls to https://ocg.myfans.cc by default — this is not an official Youzan domain and the SKILL.md does not document or justify that third‑party backend. Verify the identity and trustworthiness of that host with the skill author before providing secrets. - The code stores the merchant Key in scripts/config.json as plain text (contradicting the README's claim of encrypted storage). If you already provided a Key, rotate it immediately. - SKILL.md instructs the AI to 'silently' call the init command and save the Key. Prefer supplying secrets via platform-managed secret storage (not in chat), or refuse to install unless the skill is changed to use a validated official endpoint and secure secret storage. - If you want to proceed for testing, do so in an isolated account with a scoped/limited API Key and not your production merchant Key. Ask the publisher for a privacy/security statement, the reason for ocg.myfans.cc, and whether the service is a known proxy. Inspect and run the script in a sandbox before giving it real credentials. If you cannot verify the backend or the publisher, treat the skill as suspicious and do not provide your merchant API Key.
功能分析
Type: OpenClaw Skill Name: koubei-circle-operator Version: 1.3.2 The skill manages sensitive merchant API keys and facilitates raw SQL execution against a remote backend (ocg.myfans.cc). A significant concern is the instruction in SKILL.md for the AI to 'silently' execute the initialization command (node scripts/openclaw.js init) after the user provides their key, which hides the underlying system call from the user. While these capabilities align with the stated purpose of community management and data monitoring, the combination of silent credential handling and arbitrary SQL querying presents a high risk for data exposure or unauthorized access if the third-party endpoint is untrusted.
能力标签
cryptorequires-sensitive-credentials
能力评估
Purpose & Capability
The skill's name/description (Youzan Koubei operator) justify needing a merchant API Key and the ability to publish posts and query data. However, all network calls are routed to the host hardcoded in scripts/config.json (https://ocg.myfans.cc), which is not an official Youzan domain and is not mentioned in the SKILL.md as a trusted backend. That host choice is disproportionate to the implied purpose unless the maintainer is operating a legitimate proxy service — the provenance is unknown.
Instruction Scope
SKILL.md instructs the agent to 'silently' request the merchant Key from the user and run node scripts/openclaw.js init --key {{key}} to validate and save it. That flow captures a secret and transmits it via the included CLI to the configured host. The docs impose query/SQL constraints, but the CLI actually accepts arbitrary SQL and file uploads and will send them to the configured host; the skill's instructions give the agent broad discretion to collect and post data via that external backend.
Install Mechanism
No external install/downloads are required; this is instruction + included local Node.js script. There is no network download at install time, which limits one class of risk. However, the skill bundles an executable script (scripts/openclaw.js) that will perform network operations at runtime.
Credentials
The skill legitimately needs a merchant API Key for Youzan operations, but it requests the key via conversational input (not via a declared secure platform secret) and saves it to scripts/config.json in plaintext. SKILL.md/README claim 'API Key 加密存储' but the code writes the key unencrypted. The key is then sent to a third‑party host by default — this is disproportionate and raises exfiltration/privacy concerns.
Persistence & Privilege
The skill writes the provided Key and host into scripts/config.json in the skill directory (persistent local storage). Although 'always' is false and it doesn't modify other skills, the combination of persistent local storage + automatic network validation to an unknown host increases the blast radius if the host or skill is malicious.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install koubei-circle-operator
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /koubei-circle-operator 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.3.2
- 更新文档版本号至 v1.3.2 - 修复若干BUG
v1.3.1
v1.3.1 is a minor update.
v1.3.0
No functional or documentation changes in this release. - Version updated with no modifications detected.
v1.2.17
- No file changes were detected in this version. - Functionality and user experience remain the same as the previous release.
v1.2.16
Version 1.3.0 - 新增支持“批量发送站内信/私信”功能,使用场景与操作指令已新增说明 - “配置成功后可用功能”部分补充站内信/私信相关描述 - 使用指令表新增“批量发送私信”案例 - 版本号由 v1.2.15 升级至 v1.3.0 - 其余内容未作重大调整,原有使用约束与流程保持不变
v1.2.15
- Updated OpenClaw初始化命令参数,需使用`node scripts/openclaw.js init --key {{key}}` - 删除冗余文档和示例文件,精简代码库结构 - 补充并优化使用方式说明,新增自动化任务示例 - 完善文档导航,确保操作前须先阅读 references/api.md - 其它文本细节优化,提升配置与发贴流程指引的清晰度
v1.2.14
Initial release of the koubei-circle-operator skill with automated merchant operations for the Youzan Koubei Circle. - Added new skill for Youzan Koubei Circle merchant automation, supporting content posting, activity management, data monitoring, and automation tasks. - Integrated key configuration flow with security and step-by-step user instructions. - All operations routed through openclaw.js CLI tool; direct API access forbidden. - Post types, audit status handling, and data export to Excel clarified in user-facing guides and documentation. - Comprehensive documentation added for setup, usage, constraints, and API references.
元数据
Slug koubei-circle-operator
版本 1.3.2
许可证 MIT-0
累计安装 0
当前安装数 0
历史版本数 7
常见问题

社区运营小助手 是什么?

有赞口碑圈商家运营自动化技能。用于口碑圈发帖(文字/图片/视频/商品)、活动管理、数据监控、自动提醒、长连接推送。使用场景:商家需要在口碑圈发布内容、管理社区互动、查看运营数据、配置自动任务时触发此技能。需要商户 Key 才能执行操作。 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 116 次。

如何安装 社区运营小助手?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install koubei-circle-operator」即可一键安装,无需额外配置。

社区运营小助手 是免费的吗?

是的,社区运营小助手 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

社区运营小助手 支持哪些平台?

社区运营小助手 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 社区运营小助手?

由 Koubei_Quan(@quanceng666)开发并维护,当前版本 v1.3.2。

💬 留言讨论