Latest release: v1.3.0Download zip
Capabilities
Security Scan
OpenClaw
Suspicious
high confidencePurpose & Capability
The package coherently targets park enterprise services such as customer management, fee collection, work orders, inventory, renewals, service matching, visits, and KPI reporting. Those capabilities naturally require Excel business data and notifications, but the data includes tenant identities, contacts, contracts, arrears, complaints, work orders, and operational records.
Instruction Scope
Runtime instructions include scheduled scans and WeCom group pushes, broad manual triggers, and inventory stock-in/stock-out updates to the Excel ledger. Several actions are high-impact and the artifacts do not consistently require confirmation, recipient scoping, redaction, or approval before sending or mutating records.
Install Mechanism
The main install path is a QClaw/import-style bundle, but the included sharing guide recommends piping a remote installer through bash and unpacking remote content into a local skill directory without integrity checks or clear overwrite warnings.
Credentials
Access to Excel ledgers, cron scheduling, Tencent Docs, browser automation, and WeCom webhooks is broadly consistent with the stated business workflow, but the README's local-only assurance conflicts with documented outbound group pushes and two skills include a published WeCom webhook key-like URL.
Persistence & Privilege
The skill writes local project and memory files, can save changes to inventory Excel data, and defines recurring scheduled tasks that repeatedly read business data and send reports. This persistence is expected for the product concept but needs stronger opt-in, disable, rollback, and audit controls.
Scan Findings in Context
[SDI-4] unexpected: Accepted in part: the README says data stays local and the agent only reads the specified file, while the artifacts document memory/project files, Excel writes, generated reports, and WeCom pushes.
[SDI-2] unexpected: Accepted: customer-management and fee-collection contain the same concrete WeCom webhook key-like URL while processing tenant, contact, payment, and risk data. External notification is purpose-aligned; publishing a fixed endpoint is not.
[SDI-2] expected: Downgraded for cross-skill service-record use: fee collection consulting customer/service context is adjacent to collections, but it should be disclosed and minimized.
[SQP-2] expected: Accepted as a Review concern: many skills explicitly schedule risk, arrears, work-order, inventory, renewal, service, and visit reports to WeCom groups without clear recipient limits, redaction rules, dry-run defaults, or audit controls.
[SQP-2] unexpected: Accepted: HOW_TO_SHARE includes curl-to-bash and remote archive unpacking guidance without verification or overwrite controls; this is risky installation guidance rather than core runtime behavior.
[SQP-1] unexpected: Accepted: inventory triggers include a broad check phrase and direct stock-in/stock-out commands that can persistently change inventory records without documented authorization or confirmation gates.
What to consider before installing
Install only in an environment where the Excel ledger and WeCom recipients are approved for this data. Before production use, remove or rotate the exposed webhook URL, configure your own webhook as a protected secret, disable scheduled pushes until reviewed, add confirmation for inventory and work-order changes, and document who may receive tenant, payment, contract, and complaint information.Verification
Tags
🏢 企服助手 Agent
专业的园区企业服务智能助手
简介
企服助手是一个专为园区企业服务设计的智能助手,可以帮助你完成:
- 📊 客户管理 — 档案管理、画像分析、风险提醒
- 💰 费用催缴 — 监控逾期、分级提醒、跟进记录
- 🔧 工单分派 — 自动分派、SLA监控、超时升级
- 📦 库存监控 — 水位监控、补货提醒、出入库管理
- 📝 续租预警 — 提前3个月标记、生成续租方案
- 🤝 C+服务 — 需求挖掘、服务匹配、资源调度
- 📋 走访管理 — 计划生成、任务提醒、记录归档
- 📈 KPI报告 — 自动生成、企微推送、趋势分析
快速安装
方法一:QClaw App 直接导入
- 打开 QClaw App
- 进入「Agent 管理」页面
- 点击「导入 Agent」
- 输入分享码或上传配置包
方法二:手动安装
-
将
workspace-enterprise-service文件夹复制到:~/.qclaw/workspace-enterprise-service/ -
在 QClaw 中创建新的 Agent,指向该工作空间
-
首次启动时,按照引导完成配置
首次配置
启动后,企服助手会自动检测到你是新用户,并展示配置引导。
必填项
- 项目名称
- 数据文件路径(Excel)
可选项
- 企微 Webhook(用于消息推送)
- 隐私脱敏规则
- 业务技能开关
配置步骤
-
复制模板:
knowledge/TEMPLATE.md → knowledge/PROJECT_KB.md -
填写信息:
- 项目名称: [你的项目名] - 数据文件路径: [你的Excel文件完整路径] -
验证配置:
@企服助手 知识库已配置,帮我验证一下
使用示例
| 命令 | 功能 |
|---|---|
@企服助手 查询客户 A栋-601 | 查询客户信息 |
@企服助手 客户画像 示例企业 | 查看客户画像 |
@企服助手 催缴检查 | 检查费用收缴状态 |
@企服助手 库存检查 | 检查库存水位 |
@企服助手 续租检查 | 检查合同到期情况 |
@企服助手 创建工单 A栋-601 水管漏水 | 创建报修工单 |
文件结构
workspace-enterprise-service/
├── AGENTS.md ← 通用配置
├── SOUL.md ← 人格设定
├── IDENTITY.md ← 身份设定
├── TOOLS.md ← 工具说明
├── AGENT.json ← Agent 元数据
├── USER.md ← 个人信息(独立)
├── MEMORY.md ← 长期记忆(独立)
├── knowledge/ ← 项目知识库
│ ├── PROJECT_KB.md ← 你的项目配置(核心)
│ ├── TEMPLATE.md ← 配置模板
│ └── ONBOARDING.md ← 首次引导
└── memory/ ← 每日记忆
关键区分:
- 通用文件 → 不需要修改
- 项目知识库 → 你维护的部分
- 个人文件 → 每个用户独立
技能清单
企服助手内置以下技能:
| 技能 | 用途 |
|---|---|
qclaw-cron-skill | 定时任务和提醒 |
online-search | 网络搜索 |
docx | Word 文档处理 |
pdf | PDF 文档处理 |
xlsx | Excel 表格处理 |
tencent-docs | 腾讯文档管理 |
mcporter | MCP 工具调用 |
xbrowser | 网页浏览和自动化 |
常见问题
Q: 我的 Excel 格式和模板不一样怎么办?
A: 在 PROJECT_KB.md 中描述你的工作表结构即可,Agent 会自动适配。
Q: 可以不用企微通知吗?
A: 可以。通知渠道是可选的,没有 Webhook 也能使用查询功能。
Q: 数据安全吗?
A: 所有数据都在你的本地电脑上,不会上传到云端。Agent 只读取你指定的文件。
技术支持
如有问题,请查阅 knowledge/ONBOARDING.md 或联系分享者。
让企服助手帮你提升服务效率! 🚀
