快速配置新的agent

交互式添加并绑定新的飞书机器人账户，支持账户级或群聊级路由，自动备份配置并重启服务生效。

Before installing or running this skill: 1) Review the included index.js and lib/validator.js yourself (they will read/write ~/.openclaw/openclaw.json and create backups). 2) Do not pass App Secret on the command line in production: CLI args can be recorded in shell history and visible to other processes; prefer an interactive prompt or a secure secret mechanism. The current implementation lacks interactive prompts, so secrets are likely being supplied as CLI args—update the script to prompt or accept secrets securely. 3) Be aware the skill writes App Secret plaintext into openclaw.json and creates backups in ~/.openclaw/backups — ensure those files have restrictive permissions and are stored securely. 4) The validator (lib/validator.js) appears to incorrectly require peer.id for all bindings and may reject valid account-level bindings; test in a staging environment first. 5) Test the workflow in a non-production environment, inspect the created backup file before restarting the Gateway, and ensure the openclaw CLI exists and you understand privilege implications of restarting the service. If you cannot audit or modify the code, avoid using it with real secrets or on production systems.

Type: OpenClaw Skill Name: quick-agent-setup Version: 1.0.0 The skill manages Feishu bot configurations by directly modifying the global OpenClaw configuration file (~/.openclaw/openclaw.json) and executing shell commands via execSync to restart the system gateway. While these actions are consistent with the stated purpose in SKILL.md and index.js, the ability to perform system-level configuration changes and service restarts represents a high-risk capability. The skill also handles sensitive credentials (App Secret) and lacks robust input validation before writing to the configuration file, though no clear evidence of intentional malice or data exfiltration was found.