← 返回 Skills 市场
daimingvip-a11y

VetClaw Bundle

作者 daimingvip-a11y · GitHub ↗ · v1.0.1 · MIT-0
cross-platform ⚠ suspicious
92
总下载
0
收藏
0
当前安装
2
版本数
在 OpenClaw 中安装
/install vetclaw-bundle
功能描述
VetClaw - 52个宠物医院/兽医诊所AI自动化技能套装。覆盖排班管理、病历记录、客户回访、经营分析等场景。
安全使用建议
What to check before installing: - Manifest vs. reality: The registry lists no required environment variables, but the code and config templates use API keys for an external LLM (DEEPSEEK_API_KEY), SMS (SMS_API_KEY / SMS_API_SECRET), WeChat (WECHAT_APP_ID / WECHAT_APP_SECRET), and optional DB credentials. Ask the author to update the manifest to list required secrets. - Data exfiltration risk: If you configure an external LLM or notification provider, conversation text and patient/client data will be sent to those third parties. If that is unacceptable, do not set those API keys and run the app in 'offline' or template mode. - Run in isolation first: Start the service in a network-isolated or staging environment, without any third-party API keys, and exercise flows to see what outbound connections occur (e.g., calls to api.deepseek.com or provider endpoints). Monitor network traffic. - Limit secrets & permissions: If you must provide keys, create scoped/test credentials for the SMS/LLM providers, and do not reuse production global keys. Prefer per-environment service accounts with minimal scope. - Review code areas of interest: main.py (LLM call to https://api.deepseek.com/v1/chat/completions), config/vet-config.yaml (placeholders for SMS/WeChat/payment), and any unshown handler code that would perform outbound requests. Ensure handlers that send messages require explicit opt-in and review their templates. - Privacy & compliance: The SKILL.md claims data stays local, but enabling LLM/notification providers contradicts this. Decide whether sending medical/personal data to those providers meets your legal/privacy obligations. - Ask for provenance: The package lists GitHub links and a contact email in docs, but registry 'Source' is unknown. Verify the upstream repository and maintainer identity before deployment. If you want, I can list the exact files and lines where environment variables and external endpoints are referenced so you can audit them or propose a safer deployment checklist.
能力评估
Purpose & Capability
The code, SKILL.md, and config files match the stated purpose (52 vet-related automation skills: appointments, records, reminders, inventory, etc.). The included FastAPI web app, SQLite schema, and per-skill handlers are consistent with a clinic assistant. However, the registry metadata claims 'required env vars: none' while the SKILL.md and config templates clearly reference multiple external-provider keys (DEEPSEEK_API_KEY, SMS_API_KEY/SMS_API_SECRET, WECHAT_APP_ID/WECHAT_APP_SECRET, DB_PASSWORD). That mismatch is unexpected and should be corrected.
Instruction Scope
Runtime instructions and code direct the agent/app to read and persist patient/client data (SQLite DB under data/), and to call external APIs: main.py makes HTTP calls to a DeepSeek LLM endpoint and the config references SMS/WeChat providers and payment/phone integrations. SKILL.md asserts data 'stored locally or your chosen cloud' and 'not shared with third parties', but if an LLM key or notification provider is configured, user conversations and medical data will be sent to those third parties. The instructions also ask users to edit config files with secrets — acceptable, but the data flow to external endpoints is not sufficiently highlighted in the registry metadata.
Install Mechanism
There is no external download/install spec in the registry; this bundle ships code files and an install_skills.py that generates per-skill directories. No remote archives, URL shorteners, or extraction-from-unknown-host steps are present. Installation risk is moderate because running the bundled Python app will create a local DB and may open a web server, but there is no automatic fetch of arbitrary remote code during install.
Credentials
The skill code and config templates expect several sensitive environment variables (DEEPSEEK_API_KEY; SMS_API_KEY and SMS_API_SECRET; WECHAT_APP_ID and WECHAT_APP_SECRET; possible DB_PASSWORD for PostgreSQL). The registry metadata declares no required env vars, and the skill does not advertise these credentials as required fields in the registry. This is a proportionality and transparency issue: the skill will read secrets from the environment but the manifest does not declare them. Also, providing these keys would allow third-party services to receive conversation and medical data.
Persistence & Privilege
The skill does not request 'always: true' or other elevated registry privileges. It runs a local FastAPI app, creates a local SQLite DB under data/, and writes skill files via install_skills.py — all normal for this type of bundle. There is no evidence it modifies other skills' configs or system-wide agent settings outside its own directory.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install vetclaw-bundle
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /vetclaw-bundle 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.1
- No changes detected in this version. - Version updated to 1.0.1 with no modifications to files or documentation.
v1.0.0
VetClaw-bundle 1.0.0 – 首次发布 - 发布 VetClaw:52 个宠物医院/诊所自动化 AI 技能包,涵盖排班、病历、回访、分析等场景 - 支持智能客户登记、预约挂号、AI 电话接待、急诊分流等运营流程自动化 - 提供化验单解读、疫苗计划、每日营收报表、客户流失预警等核心功能 - 易于配置本地化医院信息、通知渠道与 LLM 提供方 - 内置兽医知识库与多技能包兼容性说明 - 提供详细文档及技术支持渠道
元数据
Slug vetclaw-bundle
版本 1.0.1
许可证 MIT-0
累计安装 0
当前安装数 0
历史版本数 2
常见问题

VetClaw Bundle 是什么?

VetClaw - 52个宠物医院/兽医诊所AI自动化技能套装。覆盖排班管理、病历记录、客户回访、经营分析等场景。 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 92 次。

如何安装 VetClaw Bundle?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install vetclaw-bundle」即可一键安装,无需额外配置。

VetClaw Bundle 是免费的吗?

是的,VetClaw Bundle 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

VetClaw Bundle 支持哪些平台?

VetClaw Bundle 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 VetClaw Bundle?

由 daimingvip-a11y(@daimingvip-a11y)开发并维护,当前版本 v1.0.1。

💬 留言讨论