MBTI Coach — Personality Development System

MBTI 人格教练。帮助用户了解自己的 MBTI 类型、设定目标类型，并通过日程管理和专业指导实现人格发展。触发词：「MBTI」「人格教练」「我想变成」「安排日程」「查看进度」「问教练」「以XX视角」。

This skill appears to implement the MBTI coaching features it claims, but pay attention to three practical points before installing: 1) Credentials: the calendar script uses FEISHU_APP_ID and FEISHU_APP_SECRET but the skill metadata doesn't declare them — if you enable calendar features, you will need to provide Feishu credentials. Avoid putting secrets into the skill folder's .env unless you trust the source; prefer setting them in your environment. 2) Global config access: the script will try to read $HOME/.openclaw/openclaw.json for Feishu credentials — review that file first, because the skill can read it. If you don't want calendar integration or credential lookup, remove/ignore the scripts. 3) Local files & dependencies: the skill will create and update data/profile.json and data/radar_chart.png in the skill workspace; radar_chart.py requires matplotlib and numpy (install manually). Recommended precautions: review the scripts (feishu_calendar.sh, radar_chart.py) yourself, run the skill in an isolated workspace, and only supply Feishu credentials if you understand that calendar event titles/descriptions will be sent to Feishu. If these points are acceptable and you only use offline features, the risk is limited; if you plan to enable Feishu integration, verify and control where credentials are stored.

Type: OpenClaw Skill Name: mbti-coach Version: 1.0.1 The skill bundle provides a legitimate MBTI coaching service but is classified as suspicious due to critical command injection vulnerabilities in `scripts/feishu_calendar.sh`. The script uses unsafe string interpolation to pass arguments into `python3 -c` calls, which allows for arbitrary Python code execution if the AI agent processes malicious user input as an event title or description. Additionally, the script's behavior of searching for credentials in the global `~/.openclaw/openclaw.json` file represents a broad permission that increases the risk profile of the skill. (IOC: open.feishu.cn)