Xiaodi Multi Team System

小弟多团队协作系统 - 金融、电商、多媒体、办公四大团队 + 智能切换器

This package appears internally consistent for a multi‑agent collaboration system. Before installing: (1) review and sandbox execution of the included scripts (they perform web scraping and media processing) — run them in an isolated environment if possible; (2) only set the optional API keys if you trust the services and understand they are used for AI video generation; (3) the skill requests exec/browser capabilities — be aware these allow running system commands and automating browsing (avoid exposing sessions/credentials to the agent); and (4) if you plan to use the finance/e‑commerce scraping features, check legal and platform scraping policies and consider configuring rate limits/proxies as suggested in the docs.

Type: OpenClaw Skill Name: xiaodi-multi-team-switcher Version: 1.0.1 The skill bundle provides a complex multi-agent system for financial, e-commerce, and media tasks, requiring high-privilege permissions such as 'exec' and 'browser'. While the behavior appears aligned with the stated purpose, the shell scripts (e.g., audio_extract.sh, video_compress.sh, and image_compress.sh) lack robust input sanitization, potentially allowing for command injection if the AI agent passes unsanitized user-provided filenames to the system shell. Per the instructions, these unintentional vulnerabilities are classified as suspicious rather than malicious, as no evidence of intentional data exfiltration or backdoors was found.