codewave-openclaw-installer 2.1.12 → 2.1.13

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "codewave-openclaw-installer",
-  "version": "2.1.12",
+  "version": "2.1.13",
   "description": "网易智企 CodeWave OpenClaw 扩展：Skills + CLI 依赖一键安装",
   "type": "module",
   "main": "index.js",

package/skills/risk-alert/SKILL.md

@@ -0,0 +1,110 @@
+# Risk Alert - 智能风险预警 Skill
+
+## 功能概述
+
+自动监控飞书群聊消息，智能识别风险并推送预警卡片。
+
+## 首次使用配置
+
+### 1. 配置飞书应用凭证
+
+需要用户提供飞书自建应用的 `App ID` 和 `App Secret`：
+
+```bash
+# 方式1：环境变量
+export FEISHU_APP_ID="your_app_id"
+export FEISHU_APP_SECRET="your_app_secret"
+
+# 方式2：配置文件（首次运行会自动创建）
+# 编辑 config.json 文件
+```
+
+### 2. 选择监控群聊
+
+首次运行时会自动获取机器人加入的所有群聊，并展示列表让用户确认：
+
+```
+📋 发现机器人已加入以下群聊：
+1. 项目群A (oc_xxx1)
+2. 项目群B (oc_xxx2)
+3. 测试群 (oc_xxx3)
+
+请选择要监控的群聊（输入序号，多个用逗号分隔，输入 all 选择全部）：
+```
+
+### 3. 选择推送目标
+
+```
+请选择风险预警推送目标：
+1. 推送到指定群聊
+2. 推送到指定用户
+3. 同时推送
+
+请输入选择（1/2/3）：
+```
+
+### 4. 保存配置
+
+配置会自动保存到 `config.json`，后续运行直接使用已保存的配置。
+
+## 使用方法
+
+### 手动执行
+
+```bash
+# 进入 skill 目录
+cd /Users/song/.openclaw/workspace/skills/risk-alert
+
+# 执行完整流程
+node scripts/risk-alert.js
+
+# 仅抓取消息
+node scripts/analyze-risk.js
+
+# 仅推送卡片（AI 分析完成后）
+node scripts/push-beautiful.js
+```
+
+### 通过触发器
+
+```bash
+# 发送触发指令给 AI
+./trigger-risk-alert.sh
+```
+
+## 工作流程
+
+```
+1. 抓取群聊消息 → raw-messages.json
+2. AI 智能分析 → risk-data.json  
+3. 推送预警卡片 → 飞书
+```
+
+## 配置项说明
+
+| 配置项 | 说明 | 必填 |
+|--------|------|------|
+| appId | 飞书应用 ID | 是 |
+| appSecret | 飞书应用 Secret | 是 |
+| monitoredChats | 监控的群聊列表 | 是 |
+| pushTarget.type | 推送类型: chat/user/both | 是 |
+| pushTarget.chatId | 推送群聊 ID | 条件必填 |
+| pushTarget.userId | 推送用户 ID | 条件必填 |
+| days | 首次拉取天数 | 否，默认7 |
+
+## 文件结构
+
+```
+risk-alert/
+├── SKILL.md              # 本文件
+├── config.json           # 用户配置（首次运行生成）
+├── trigger-risk-alert.sh # 触发脚本
+├── scheduler.sh          # 定时任务
+└── scripts/
+    ├── analyze-risk.js   # 消息抓取
+    ├── risk-alert.js     # 流程控制
+    ├── push-beautiful.js # 卡片推送
+    ├── config-manager.js # 配置管理
+    └── lib/
+        └── feishu-api.js # 飞书 API 封装
+```

package/skills/risk-alert/config.example.json

@@ -0,0 +1,21 @@
+{
+  "feishu": {
+    "appId": "YOUR_APP_ID_HERE",
+    "appSecret": "YOUR_APP_SECRET_HERE"
+  },
+  "monitoredChats": [
+    {
+      "id": "oc_xxxxxxxxxxxxxxxxxxxxxxxxxxxxx",
+      "name": "群聊名称"
+    }
+  ],
+  "pushTarget": {
+    "type": "chat",
+    "chatId": "oc_xxxxxxxxxxxxxxxxxxxxxxxxxxxxx",
+    "userId": ""
+  },
+  "settings": {
+    "days": 7,
+    "incrementMode": true
+  }
+}

package/skills/risk-alert/scheduler.sh

@@ -0,0 +1,74 @@
+#!/bin/bash
+# Risk Alert 定时推送脚本
+# 每20分钟执行一次
+
+# 设置 PATH（launchd 环境变量不同）
+export PATH="/usr/local/bin:/usr/bin:/bin:/usr/sbin:/sbin:$PATH"
+
+# 查找 node 路径
+NODE_PATH=$(which node)
+if [ -z "$NODE_PATH" ]; then
+    # 尝试常见路径
+    if [ -f "/usr/local/bin/node" ]; then
+        NODE_PATH="/usr/local/bin/node"
+    elif [ -f "/opt/homebrew/bin/node" ]; then
+        NODE_PATH="/opt/homebrew/bin/node"
+    elif [ -f "$HOME/.nvm/versions/node/v22.18.0/bin/node" ]; then
+        NODE_PATH="$HOME/.nvm/versions/node/v22.18.0/bin/node"
+    fi
+fi
+
+# 工作目录
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+cd "$SCRIPT_DIR/scripts"
+
+# 日志文件
+LOG_FILE="$SCRIPT_DIR/risk-alert.log"
+
+echo "[$(date '+%Y-%m-%d %H:%M:%S')] 开始执行 Risk Alert 定时任务" >> "$LOG_FILE"
+
+# Step 1: 全量抓取消息（删除状态文件）
+echo "[$(date '+%Y-%m-%d %H:%M:%S')] 步骤1: 抓取消息..." >> "$LOG_FILE"
+rm -f last-fetch-state.json
+$NODE_PATH analyze-risk.js >> "$LOG_FILE" 2>&1
+if [ $? -ne 0 ]; then
+    echo "[$(date '+%Y-%m-%d %H:%M:%S')] ❌ 消息抓取失败" >> "$LOG_FILE"
+    exit 1
+fi
+
+# 检查是否有新消息
+if [ -f "raw-messages.json" ]; then
+    NEW_COUNT=$($NODE_PATH -e "console.log(JSON.parse(require('fs').readFileSync('raw-messages.json')).newMessagesCount || 0)")
+    echo "[$(date '+%Y-%m-%d %H:%M:%S')] 新增消息: $NEW_COUNT 条" >> "$LOG_FILE"
+    
+    if [ "$NEW_COUNT" -eq 0 ]; then
+        echo "[$(date '+%Y-%m-%d %H:%M:%S')] ℹ️ 没有新消息，跳过分析" >> "$LOG_FILE"
+        # 仍然推送一次（显示无风险状态）
+        $NODE_PATH push-beautiful.js >> "$LOG_FILE" 2>&1
+        echo "[$(date '+%Y-%m-%d %H:%M:%S')] ✅ 已推送无风险状态卡片" >> "$LOG_FILE"
+        exit 0
+    fi
+fi
+
+# Step 2: 生成 AI 任务文件
+echo "[$(date '+%Y-%m-%d %H:%M:%S')] 步骤2: 生成 AI 分析任务..." >> "$LOG_FILE"
+$NODE_PATH risk-alert.js >> "$LOG_FILE" 2>&1
+
+# Step 3: 调用 AI 分析（通过发送消息触发）
+echo "[$(date '+%Y-%m-%d %H:%M:%S')] 步骤3: 等待 AI 分析..." >> "$LOG_FILE"
+echo "请 AI 助手执行风险分析并生成 risk-data.json，然后执行: node risk-alert.js push"
+
+# 注意：AI 分析需要手动触发或由 AI 自动处理
+# 这里我们直接推送（假设 AI 已经完成分析或 risk-data.json 已存在）
+
+# Step 4: 推送卡片
+echo "[$(date '+%Y-%m-%d %H:%M:%S')] 步骤4: 推送卡片..." >> "$LOG_FILE"
+$NODE_PATH risk-alert.js push >> "$LOG_FILE" 2>&1
+if [ $? -eq 0 ]; then
+    echo "[$(date '+%Y-%m-%d %H:%M:%S')] ✅ 推送成功" >> "$LOG_FILE"
+else
+    echo "[$(date '+%Y-%m-%d %H:%M:%S')] ❌ 推送失败" >> "$LOG_FILE"
+fi
+
+echo "[$(date '+%Y-%m-%d %H:%M:%S')] 定时任务执行完毕" >> "$LOG_FILE"
+echo "---" >> "$LOG_FILE"

package/skills/risk-alert/scripts/analyze-risk.js

@@ -0,0 +1,414 @@
+#!/usr/bin/env node
+const fs = require('fs');
+const path = require('path');
+const { execSync } = require('child_process');
+const { loadConfig, getCredentials, isConfigValid, runConfigWizard } = require('./config-manager');
+
+// --- Load Config ---
+const CONFIG = loadConfig();
+const CREDENTIALS = getCredentials(CONFIG);
+
+// --- State File ---
+const STATE_FILE = path.join(__dirname, 'last-fetch-state.json');
+const OUTPUT_MD = path.join(__dirname, 'raw-messages.md');
+const OUTPUT_JSON = path.join(__dirname, 'raw-messages.json');
+
+// --- Utils: Format Time ---
+function formatTime(timestamp) {
+    const date = new Date(parseInt(timestamp));
+    return date.toLocaleString('zh-CN', {
+        year: 'numeric',
+        month: '2-digit',
+        day: '2-digit',
+        hour: '2-digit',
+        minute: '2-digit',
+        second: '2-digit'
+    });
+}
+
+function formatTimeShort(timestamp) {
+    const date = new Date(parseInt(timestamp));
+    return `${date.getFullYear()}-${String(date.getMonth() + 1).padStart(2, '0')}-${String(date.getDate()).padStart(2, '0')} ${String(date.getHours()).padStart(2, '0')}:${String(date.getMinutes()).padStart(2, '0')}:${String(date.getSeconds()).padStart(2, '0')}`;
+}
+
+// --- Utils: Load/Save State ---
+function loadState() {
+    try {
+        if (fs.existsSync(STATE_FILE)) {
+            return JSON.parse(fs.readFileSync(STATE_FILE, 'utf8'));
+        }
+    } catch (e) {
+        console.warn('Warning: Could not load state file, starting fresh.');
+    }
+    return null;
+}
+
+function saveState(state) {
+    fs.writeFileSync(STATE_FILE, JSON.stringify(state, null, 2), 'utf8');
+}
+
+// --- Utils: Extract Message Content ---
+function extractContent(msg) {
+    const body = msg.body || {};
+    const content = body.content ? JSON.parse(body.content) : {};
+    
+    switch (msg.msg_type) {
+        case 'text':
+            return content.text || '';
+        case 'post':
+            if (content.content) {
+                return content.content.map(line => 
+                    line.map(item => item.text || '').join('')
+                ).join('<br>');
+            }
+            return '[富文本消息]';
+        case 'interactive':
+            return '[卡片消息]';
+        case 'system':
+            return content.template || '[系统消息]';
+        default:
+            return `[${msg.msg_type}消息]`;
+    }
+}
+
+// --- Utils: Fetch User Name from Feishu API ---
+const userNameCache = {};
+function fetchUserName(userId, token) {
+    if (userNameCache[userId]) return userNameCache[userId];
+    if (!userId || !token) return null;
+    
+    try {
+        const res = execSync(`curl -s -X GET 'https://open.feishu.cn/open-apis/contact/v3/users/${userId}' -H 'Authorization: Bearer ${token}'`);
+        const data = JSON.parse(res);
+        if (data.code === 0 && data.data && data.data.user) {
+            const name = data.data.user.name;
+            userNameCache[userId] = name;
+            return name;
+        }
+    } catch (e) {
+        // API 调用失败，返回 null
+    }
+    return null;
+}
+
+// --- Utils: Fetch Chat Members ---
+const chatMembersCache = {};
+function fetchChatMembers(chatId, token) {
+    if (chatMembersCache[chatId]) return chatMembersCache[chatId];
+    if (!chatId || !token) return {};
+    
+    try {
+        const res = execSync(`curl -s -X GET 'https://open.feishu.cn/open-apis/im/v1/chats/${chatId}/members?page_size=100' -H 'Authorization: Bearer ${token}'`);
+        const data = JSON.parse(res);
+        if (data.code === 0 && data.data && data.data.items) {
+            const members = {};
+            data.data.items.forEach(member => {
+                if (member.member_id && member.name) {
+                    members[member.member_id] = member.name;
+                }
+            });
+            chatMembersCache[chatId] = members;
+            return members;
+        }
+    } catch (e) {
+        // API 调用失败，返回空对象
+    }
+    return {};
+}
+
+// --- Utils: Get Sender Name ---
+function getSenderName(msg, userMap, token) {
+    if (msg.sender.sender_type === 'app') {
+        return '机器人';
+    }
+    if (userMap && userMap[msg.sender.id]) {
+        return userMap[msg.sender.id];
+    }
+    if (msg.mentions && msg.mentions.length > 0) {
+        const mention = msg.mentions.find(m => m.id === msg.sender.id);
+        if (mention) return mention.name;
+    }
+    // Try to fetch from API
+    if (token && msg.sender.id) {
+        const apiName = fetchUserName(msg.sender.id, token);
+        if (apiName) return apiName;
+    }
+    return msg.sender.id ? `用户(${msg.sender.id.slice(-6)})` : '未知用户';
+}
+
+// --- Main Data Fetching Logic ---
+async function main() {
+    // 检查配置
+    if (!isConfigValid(CONFIG)) {
+        console.log('⚠️ 首次使用，需要进行配置\n');
+        await runConfigWizard();
+        console.log('请重新运行脚本');
+        process.exit(0);
+    }
+
+    // 验证凭证
+    if (!CREDENTIALS.appId || !CREDENTIALS.appSecret) {
+        console.error('❌ 未配置飞书应用凭证');
+        console.log('请设置环境变量 FEISHU_APP_ID 和 FEISHU_APP_SECRET，或运行配置向导');
+        process.exit(1);
+    }
+
+    // Load previous state
+    const state = loadState();
+    const isFirstRun = !state || !state.lastFetchTime;
+    
+    if (isFirstRun) {
+        console.log('🆕 首次运行，将拉取最近 ' + CONFIG.settings.days + ' 天的消息...');
+    } else {
+        const lastTime = formatTime(state.lastFetchTime);
+        console.log('📥 增量模式，上次拉取时间：' + lastTime);
+        console.log('   将只拉取新消息...');
+    }
+    
+    // 1. Get Access Token
+    let token;
+    try {
+        const response = execSync(`curl -s -X POST 'https://open.feishu.cn/open-apis/auth/v3/tenant_access_token/internal' -H 'Content-Type: application/json' -d '{"app_id":"${CREDENTIALS.appId}","app_secret":"${CREDENTIALS.appSecret}"}'`, { encoding: 'utf8' });
+        const data = JSON.parse(response);
+        if (data.code !== 0) throw new Error(data.msg || 'Token API error');
+        token = data.tenant_access_token;
+    } catch (e) {
+        console.error("Fatal: Could not obtain access token.", e.message);
+        process.exit(1);
+    }
+    console.log('✅ Access token obtained.');
+
+    // 2. 使用配置的监控群聊列表
+    const monitoredChats = CONFIG.monitoredChats;
+    if (monitoredChats.length === 0) {
+        console.error('❌ 未配置监控群聊');
+        process.exit(1);
+    }
+    console.log(`✅ 监控 ${monitoredChats.length} 个群聊.`);
+
+    // Calculate start time
+    let startTimeMs;
+    if (isFirstRun) {
+        startTimeMs = Date.now() - CONFIG.settings.days * 24 * 60 * 60 * 1000;
+    } else {
+        startTimeMs = state.lastFetchTime;
+    }
+    
+    // Build user map from state or empty
+    let userMap = state ? (state.userMap || {}) : {};
+    const existingMessages = state ? (state.messages || {}) : {};
+    const messagesByChat = {}; // New messages only
+    let latestMessageTime = startTimeMs;
+    let totalNewMessages = 0;
+    
+    // Pre-fetch chat members to build user map
+    console.log('\n👥 正在获取群成员信息...');
+    for (const chat of monitoredChats) {
+        const members = fetchChatMembers(chat.id, token);
+        Object.assign(userMap, members);
+    }
+    console.log(`✅ 已缓存 ${Object.keys(userMap).length} 个用户信息`);
+    
+    for (const chat of monitoredChats) {
+        messagesByChat[chat.id] = [];
+        
+        let messageCount = 0;
+        let pt = '';
+        console.log(`Fetching messages from "${chat.name}"...`);
+        
+        while (true) {
+            try {
+                // Build URL with from_time for incremental fetch
+                let url = `https://open.feishu.cn/open-apis/im/v1/messages?container_id=${chat.id}&container_id_type=chat&page_size=50`;
+                if (pt) {
+                    url += `&page_token=${pt}`;
+                }
+                // Note: Feishu API uses 'from_time' in seconds
+                url += `&from_time=${Math.floor(startTimeMs / 1000)}`;
+                
+                const res = JSON.parse(execSync(`curl -s -X GET "${url}" -H 'Authorization: Bearer ${token}'`));
+                if (res.code !== 0) {
+                    console.warn(`Warning: Could not fetch messages for ${chat.name}. Code: ${res.code}, Msg: ${res.msg}`);
+                    break;
+                }
+                const items = res.data.items || [];
+                items.forEach(msg => {
+                    // Skip if already exists
+                    if (existingMessages[msg.message_id]) return;
+                    
+                    const senderName = getSenderName(msg, userMap, token);
+                    if (msg.sender.id && senderName !== '机器人' && !senderName.startsWith('用户(')) {
+                        userMap[msg.sender.id] = senderName;
+                    }
+                    
+                    const msgTime = parseInt(msg.create_time);
+                    if (msgTime > latestMessageTime) {
+                        latestMessageTime = msgTime;
+                    }
+                    
+                    messagesByChat[chat.id].push({
+                        message_id: msg.message_id,
+                        time: msg.create_time,
+                        sender_type: msg.sender.sender_type,
+                        sender_id: msg.sender.id,
+                        sender_name: senderName,
+                        msg_type: msg.msg_type,
+                        content: extractContent(msg),
+                        parent_id: msg.parent_id || null
+                    });
+                    
+                    // Mark as existing
+                    existingMessages[msg.message_id] = true;
+                });
+                messageCount += items.length;
+                if (!res.data.has_more) break;
+                pt = res.data.page_token;
+            } catch(e) {
+                console.error(`Error fetching messages for ${chat.name}:`, e.message);
+                break;
+            }
+        }
+        console.log(` -> Fetched ${messageCount} messages (${messagesByChat[chat.id].length} new).`);
+        totalNewMessages += messagesByChat[chat.id].length;
+    }
+    
+    console.log(`\n📊 本次共获取 ${totalNewMessages} 条新消息`);
+    
+    if (totalNewMessages === 0) {
+        console.log('✅ 没有新消息，无需更新。');
+        // Still update last fetch time
+        saveState({
+            lastFetchTime: latestMessageTime,
+            userMap: userMap,
+            messages: existingMessages,
+            chatList: monitoredChats
+        });
+        return;
+    }
+    
+    // 3. Generate/Update Markdown Report
+    let mdContent;
+    let allMessagesByChat = {};
+    
+    if (isFirstRun || !fs.existsSync(OUTPUT_MD)) {
+        // First run - create new file
+        mdContent = `# 飞书群聊消息原始数据\n\n`;
+        mdContent += `**首次生成时间：** ${new Date().toLocaleString('zh-CN')}\n\n`;
+        mdContent += `**群聊数量：** ${monitoredChats.length} 个\n\n`;
+        mdContent += `**模式：** 增量拉取（首次全量）\n\n`;
+        mdContent += `---\n\n`;
+        
+        // Use fetched messages as all messages
+        for (const chatId in messagesByChat) {
+            allMessagesByChat[chatId] = messagesByChat[chatId];
+        }
+    } else {
+        // Incremental - need to merge with existing
+        console.log('\n📝 合并新消息到现有报告...');
+        
+        // Parse existing markdown to extract messages (simplified approach)
+        // For now, we'll append new sections
+        mdContent = fs.readFileSync(OUTPUT_MD, 'utf8');
+        
+        // Remove trailing --- if exists
+        mdContent = mdContent.replace(/---\n\n$/, '');
+        
+        // Add update timestamp
+        mdContent += `\n\n## 🔄 增量更新 ${new Date().toLocaleString('zh-CN')}\n\n`;
+        mdContent += `**本次新增消息：** ${totalNewMessages} 条\n\n`;
+        
+        allMessagesByChat = messagesByChat; // Only show new messages in this update section
+    }
+    
+    // Generate table for each chat
+    for (const chatId in allMessagesByChat) {
+        const chat = monitoredChats.find(c => c.id === chatId);
+        const chatName = chat?.name || '未知群聊';
+        let messages = allMessagesByChat[chatId];
+        
+        if (messages.length === 0) continue;
+        
+        messages.sort((a, b) => parseInt(a.time) - parseInt(b.time));
+        
+        if (isFirstRun) {
+            mdContent += `## 📁 ${chatName}\n\n`;
+            mdContent += `**群聊ID：** \`${chatId}\`\n\n`;
+        } else {
+            mdContent += `### 📁 ${chatName}（新增）\n\n`;
+        }
+        
+        mdContent += `| 序号 | 时间 | 发送者 | 类型 | 消息内容 |\n`;
+        mdContent += `|------|------|--------|------|----------|\n`;
+        
+        // Group consecutive messages from same sender
+        const groupedMessages = [];
+        let currentGroup = null;
+        
+        messages.forEach((msg, index) => {
+            const timeShort = formatTimeShort(msg.time);
+            const content = msg.content.replace(/\|/g, '\\|').replace(/\n/g, '<br>');
+            
+            if (msg.sender_type === 'user' && msg.msg_type === 'text' && 
+                currentGroup && currentGroup.sender_id === msg.sender_id &&
+                index > 0 && messages[index - 1].sender_id === msg.sender_id) {
+                currentGroup.messages.push({ time: timeShort, content });
+            } else {
+                currentGroup = {
+                    sender_id: msg.sender_id,
+                    sender_name: msg.sender_name,
+                    msg_type: msg.msg_type,
+                    messages: [{ time: timeShort, content }]
+                };
+                groupedMessages.push(currentGroup);
+            }
+        });
+        
+        groupedMessages.forEach((group, groupIndex) => {
+            if (group.messages.length === 1) {
+                const msg = group.messages[0];
+                mdContent += `| ${groupIndex + 1} | ${msg.time} | ${group.sender_name} | ${group.msg_type} | ${msg.content} |\n`;
+            } else {
+                const times = group.messages.map(m => m.time).join(' → ');
+                const contents = group.messages.map(m => m.content).join(' → ');
+                mdContent += `| ${groupIndex + 1} | ${times} | ${group.sender_name} | ${group.msg_type} | ${contents} |\n`;
+            }
+        });
+        
+        const userMessages = messages.filter(m => m.sender_type === 'user' && m.msg_type === 'text');
+        if (userMessages.length > 1) {
+            const timeLine = userMessages.map(m => formatTimeShort(m.time)).join(' → ');
+            mdContent += `| ⏱️ | **时间线** | - | - | ${timeLine} |\n`;
+        }
+        
+        mdContent += `\n**消息数量：** ${messages.length} 条\n\n`;
+        mdContent += `---\n\n`;
+    }
+    
+    // Save Markdown
+    fs.writeFileSync(OUTPUT_MD, mdContent, 'utf8');
+    console.log(`✅ Markdown report saved to ${OUTPUT_MD}`);
+    
+    // Save state
+    saveState({
+        lastFetchTime: latestMessageTime,
+        userMap: userMap,
+        messages: existingMessages,
+        chatList: monitoredChats
+    });
+    console.log(`✅ State saved (last fetch: ${formatTime(latestMessageTime)})`);
+    
+    // Also save JSON for backward compatibility
+    const allMessages = Object.values(messagesByChat).flat();
+    const jsonOutput = {
+        updateTime: new Date().toISOString(),
+        isIncremental: !isFirstRun,
+        newMessagesCount: totalNewMessages,
+        chats: monitoredChats,
+        messages: allMessages
+    };
+    fs.writeFileSync(OUTPUT_JSON, JSON.stringify(jsonOutput, null, 2), 'utf8');
+    
+    console.log('\n✅ 增量拉取完成！');
+}
+
+main();

package/skills/risk-alert/scripts/config-manager.js

@@ -0,0 +1,241 @@
+const fs = require('fs');
+const path = require('path');
+const { execSync } = require('child_process');
+const readline = require('readline');
+
+const CONFIG_FILE = path.join(__dirname, '..', 'config.json');
+
+// 默认配置
+const DEFAULT_CONFIG = {
+  feishu: {
+    appId: '',
+    appSecret: ''
+  },
+  monitoredChats: [], // { id, name }
+  pushTarget: {
+    type: 'chat', // 'chat' | 'user' | 'both'
+    chatId: '',
+    userId: ''
+  },
+  settings: {
+    days: 7,
+    incrementMode: true
+  }
+};
+
+// 加载配置
+function loadConfig() {
+  try {
+    if (fs.existsSync(CONFIG_FILE)) {
+      return JSON.parse(fs.readFileSync(CONFIG_FILE, 'utf8'));
+    }
+  } catch (e) {
+    console.warn('⚠️ 配置文件读取失败，使用默认配置');
+  }
+  return { ...DEFAULT_CONFIG };
+}
+
+// 保存配置
+function saveConfig(config) {
+  fs.writeFileSync(CONFIG_FILE, JSON.stringify(config, null, 2), 'utf8');
+  console.log(`✅ 配置已保存到: ${CONFIG_FILE}`);
+}
+
+// 检查配置是否完整
+function isConfigValid(config) {
+  return config.feishu.appId && 
+         config.feishu.appSecret && 
+         config.monitoredChats.length > 0 &&
+         (config.pushTarget.chatId || config.pushTarget.userId);
+}
+
+// 获取环境变量或配置的凭证
+function getCredentials(config) {
+  return {
+    appId: process.env.FEISHU_APP_ID || config.feishu.appId,
+    appSecret: process.env.FEISHU_APP_SECRET || config.feishu.appSecret
+  };
+}
+
+// 交互式配置向导
+async function runConfigWizard() {
+  const rl = readline.createInterface({
+    input: process.stdin,
+    output: process.stdout
+  });
+
+  const question = (prompt) => new Promise(resolve => rl.question(prompt, resolve));
+
+  console.log('\n🚀 Risk Alert 首次配置向导\n');
+  console.log('═══════════════════════════════════════\n');
+
+  const config = loadConfig();
+  const credentials = getCredentials(config);
+
+  // Step 1: 配置飞书应用凭证
+  console.log('📋 Step 1: 飞书应用凭证');
+  console.log('─────────────────────────────────────');
+  
+  if (!credentials.appId) {
+    config.feishu.appId = await question('请输入飞书 App ID: ');
+  } else {
+    console.log(`✓ App ID: ${credentials.appId}`);
+    const change = await question('是否修改? (y/N): ');
+    if (change.toLowerCase() === 'y') {
+      config.feishu.appId = await question('请输入飞书 App ID: ');
+    } else {
+      config.feishu.appId = credentials.appId;
+    }
+  }
+
+  if (!credentials.appSecret) {
+    config.feishu.appSecret = await question('请输入飞书 App Secret: ');
+  } else {
+    console.log(`✓ App Secret: ${'*'.repeat(credentials.appSecret.length)}`);
+    const change = await question('是否修改? (y/N): ');
+    if (change.toLowerCase() === 'y') {
+      config.feishu.appSecret = await question('请输入飞书 App Secret: ');
+    } else {
+      config.feishu.appSecret = credentials.appSecret;
+    }
+  }
+
+  // 测试凭证有效性
+  console.log('\n🔄 正在验证凭证...');
+  const token = await testCredentials(config.feishu.appId, config.feishu.appSecret);
+  if (!token) {
+    console.error('❌ 凭证验证失败，请检查 App ID 和 App Secret');
+    rl.close();
+    process.exit(1);
+  }
+  console.log('✅ 凭证验证通过\n');
+
+  // Step 2: 选择监控群聊
+  console.log('📋 Step 2: 选择监控群聊');
+  console.log('─────────────────────────────────────');
+  
+  const chats = await fetchChatList(token);
+  if (chats.length === 0) {
+    console.error('❌ 机器人未加入任何群聊');
+    rl.close();
+    process.exit(1);
+  }
+
+  console.log(`\n📋 发现机器人已加入 ${chats.length} 个群聊：`);
+  chats.forEach((chat, idx) => {
+    console.log(`  ${idx + 1}. ${chat.name} (${chat.chat_id})`);
+  });
+
+  // 默认监控所有群聊，但让用户确认
+  console.log(`\n📋 默认将监控以上所有 ${chats.length} 个群聊`);
+  const selected = await question('\n请确认或修改：\n  - 直接回车确认监控所有群聊\n  - 输入序号选择特定群聊（多个用逗号分隔）\n  - 输入 none 取消选择\n\n您的选择 [默认: all]: ');
+  
+  if (selected.trim() === '' || selected.toLowerCase() === 'all') {
+    // 默认选择所有
+    config.monitoredChats = chats.map(c => ({ id: c.chat_id, name: c.name }));
+    console.log(`✅ 已选择所有 ${config.monitoredChats.length} 个群聊进行监控\n`);
+  } else if (selected.toLowerCase() === 'none') {
+    config.monitoredChats = [];
+    console.log('⚠️ 未选择任何群聊\n');
+  } else {
+    // 选择特定群聊
+    const indices = selected.split(',').map(s => parseInt(s.trim()) - 1).filter(i => i >= 0 && i < chats.length);
+    config.monitoredChats = indices.map(i => ({ id: chats[i].chat_id, name: chats[i].name }));
+    console.log(`✅ 已选择 ${config.monitoredChats.length} 个群聊进行监控\n`);
+  }
+
+  // Step 3: 选择推送目标
+  console.log('📋 Step 3: 选择推送目标');
+  console.log('─────────────────────────────────────');
+  console.log('1. 推送到指定群聊');
+  console.log('2. 推送到指定用户');
+  console.log('3. 同时推送');
+  
+  const pushType = await question('\n请输入选择（1/2/3）：');
+  
+  switch (pushType) {
+    case '1':
+      config.pushTarget.type = 'chat';
+      const chatIdx = await question('请选择推送群聊（输入序号）：');
+      const idx = parseInt(chatIdx) - 1;
+      if (idx >= 0 && idx < chats.length) {
+        config.pushTarget.chatId = chats[idx].chat_id;
+        console.log(`✅ 将推送到群聊: ${chats[idx].name}`);
+      }
+      break;
+    case '2':
+      config.pushTarget.type = 'user';
+      config.pushTarget.userId = await question('请输入用户 Open ID: ');
+      console.log(`✅ 将推送到用户: ${config.pushTarget.userId}`);
+      break;
+    case '3':
+      config.pushTarget.type = 'both';
+      const chatIdx2 = await question('请选择推送群聊（输入序号）：');
+      const idx2 = parseInt(chatIdx2) - 1;
+      if (idx2 >= 0 && idx2 < chats.length) {
+        config.pushTarget.chatId = chats[idx2].chat_id;
+      }
+      config.pushTarget.userId = await question('请输入用户 Open ID: ');
+      console.log(`✅ 将同时推送到群聊和用户`);
+      break;
+    default:
+      console.log('⚠️ 无效选择，默认推送到第一个监控群聊');
+      config.pushTarget.type = 'chat';
+      config.pushTarget.chatId = config.monitoredChats[0]?.id || '';
+  }
+
+  // Step 4: 其他设置
+  console.log('\n📋 Step 4: 其他设置');
+  console.log('─────────────────────────────────────');
+  const days = await question(`首次拉取天数（默认 ${config.settings.days}）：`);
+  if (days) config.settings.days = parseInt(days) || 7;
+
+  rl.close();
+
+  // 保存配置
+  saveConfig(config);
+  
+  console.log('\n═══════════════════════════════════════');
+  console.log('✅ 配置完成！可以开始使用 Risk Alert 了。');
+  console.log('═══════════════════════════════════════\n');
+  
+  return config;
+}
+
+// 测试凭证
+async function testCredentials(appId, appSecret) {
+  try {
+    const res = execSync(`curl -s -X POST 'https://open.feishu.cn/open-apis/auth/v3/tenant_access_token/internal' \
+      -H 'Content-Type: application/json' \
+      -d '{"app_id":"${appId}","app_secret":"${appSecret}"}'`, { encoding: 'utf8' });
+    const data = JSON.parse(res);
+    return data.code === 0 ? data.tenant_access_token : null;
+  } catch (e) {
+    return null;
+  }
+}
+
+// 获取群聊列表
+async function fetchChatList(token) {
+  try {
+    const res = execSync(`curl -s -X GET 'https://open.feishu.cn/open-apis/im/v1/chats?page_size=100' \
+      -H 'Authorization: Bearer ${token}'`, { encoding: 'utf8' });
+    const data = JSON.parse(res);
+    if (data.code === 0 && data.data && data.data.items) {
+      return data.data.items.filter(c => c.name);
+    }
+  } catch (e) {
+    console.error('获取群聊列表失败:', e.message);
+  }
+  return [];
+}
+
+module.exports = {
+  loadConfig,
+  saveConfig,
+  isConfigValid,
+  getCredentials,
+  runConfigWizard,
+  testCredentials,
+  fetchChatList
+};

package/skills/risk-alert/scripts/push-beautiful.js

@@ -0,0 +1,225 @@
+#!/usr/bin/env node
+const fs = require('fs');
+const path = require('path');
+const https = require('https');
+const { loadConfig, getCredentials } = require('./config-manager');
+
+// 加载配置
+const CONFIG = loadConfig();
+const CREDENTIALS = getCredentials(CONFIG);
+
+async function getAccessToken() {
+    return new Promise((resolve, reject) => {
+        const req = https.request({
+            hostname: 'open.feishu.cn', 
+            path: '/open-apis/auth/v3/tenant_access_token/internal', 
+            method: 'POST',
+            headers: { 'Content-Type': 'application/json; charset=utf-8' }
+        }, res => {
+            let data = ''; 
+            res.on('data', chunk => data += chunk);
+            res.on('end', () => { 
+                try { 
+                    const r = JSON.parse(data); 
+                    r.code === 0 ? resolve(r.tenant_access_token) : reject(new Error(r.msg)); 
+                } catch (e) { 
+                    reject(e); 
+                } 
+            });
+        });
+        req.on('error', reject); 
+        req.write(JSON.stringify({ 
+            app_id: CREDENTIALS.appId, 
+            app_secret: CREDENTIALS.appSecret 
+        })); 
+        req.end();
+    });
+}
+
+async function sendCard(token, card, targetType, targetId) {
+    const receive_id_type = targetType === 'chat' ? 'chat_id' : 'open_id';
+    const receive_id = targetId;
+    const payload = JSON.stringify({ 
+        receive_id: receive_id, 
+        msg_type: 'interactive', 
+        content: JSON.stringify(card) 
+    });
+    
+    return new Promise((resolve, reject) => {
+        const req = https.request({
+            hostname: 'open.feishu.cn', 
+            path: `/open-apis/im/v1/messages?receive_id_type=${receive_id_type}`, 
+            method: 'POST',
+            headers: { 
+                'Authorization': `Bearer ${token}`, 
+                'Content-Type': 'application/json; charset=utf-8' 
+            }
+        }, res => {
+            let data = ''; 
+            res.on('data', chunk => data += chunk); 
+            res.on('end', () => { 
+                try { 
+                    const r = JSON.parse(data); 
+                    r.code === 0 ? resolve(r) : reject(new Error(r.msg)); 
+                } catch (e) { 
+                    reject(e); 
+                } 
+            });
+        });
+        req.on('error', reject); 
+        req.write(payload); 
+        req.end();
+    });
+}
+
+function generateCard(data) {
+    if (!data || !data.riskCount) {
+        return { 
+            config: { wide_screen_mode: true },
+            header: { 
+                template: "red", 
+                title: { content: "❌ 报告生成失败", tag: "plain_text" } 
+            }, 
+            elements: [{ tag: "div", text: { content: "未能加载风险数据。", tag: "lark_md" } }] 
+        };
+    }
+    
+    const headerTemplate = data.riskCount.high > 0 ? "red" : (data.riskCount.medium > 0 ? "yellow" : "green");
+    const rc = data.riskCount;
+    const headerTitle = `风险预警报告 (${data.checkTime})  🔴${rc.high} 🟡${rc.medium} 🟢${rc.low}`;
+    const elements = [];
+    
+    // 1. 风险详情
+    elements.push({ tag: "div", text: { content: "**🚨 风险详情**", tag: "lark_md" } });
+    if (!data.hasRisk) {
+        elements.push({ tag: "div", text: { content: "未发现需关注的风险。", tag: "lark_md" } });
+    } else {
+        const allRisks = [...data.highRisks, ...data.mediumRisks, ...data.lowRisks];
+        allRisks.forEach((risk, idx) => {
+            const levelIcon = risk.level === 'high' ? '🔴' : (risk.level === 'medium' ? '🟡' : '🟢');
+            let riskTitle = `${levelIcon} **风险${idx + 1}：${risk.dangers.join('、')}**`;
+            if (risk.conclusion.includes("【升级】")) riskTitle += " 【升级】";
+            if (risk.conclusion.includes("【降级】")) riskTitle += " 【降级】";
+            if (risk.conclusion.includes("合并")) riskTitle += ` (${risk.conclusion.match(/合并\d+条/)[0]})`;
+            elements.push({ tag: "div", text: { content: riskTitle, tag: "lark_md" } });
+            let handledText = '暂无人回复，建议跟进';
+            if (risk.handledInfo.handled) handledText = `✅ 由 **${risk.handledInfo.handler}** 跟进`;
+            const finalConclusion = risk.level === 'high' ? '🔴 高风险 - 需立即处理' : (risk.level === 'medium' ? '🟡 中风险 - 建议跟进' : '🟢 低风险 - 已有响应');
+            elements.push({ tag: "div", text: { content: `**群聊：** ${risk.chat}`, tag: "lark_md" } });
+            elements.push({ tag: "div", text: { content: `<font color='red'>**原因：** ${risk.cause}</font>`, tag: "lark_md" } });
+            elements.push({ tag: "div", text: { content: `**处理状态：** ${handledText}`, tag: "lark_md" } });
+            elements.push({ tag: "div", text: { content: `**发送者：** ${risk.sender} | **时间：** ${risk.time}`, tag: "lark_md" } });
+            elements.push({ tag: "div", text: { content: `**内容：** ${risk.content.length > 200 ? risk.content.substring(0, 200) + '...' : risk.content}`, tag: "lark_md" } });
+            elements.push({ tag: "div", text: { content: `**结论：** ${finalConclusion}`, tag: "lark_md" } });
+            if (idx < allRisks.length - 1) elements.push({ tag: "hr" });
+        });
+    }
+    
+    elements.push({ tag: "hr" });
+    
+    // 2. 风险概览
+    elements.push({ tag: "div", text: { content: "**📊 风险概览**", tag: "lark_md" } });
+    const chatList = (data.chatDetails || []).map((chat, i) => `${i+1}. ${chat.name} (${chat.count}条消息)`).join('\n');
+    elements.push({ tag: "div", text: { content: `**📋 检测群聊（${data.chatDetails.length}个）：**\n${chatList}`, tag: "lark_md" } });
+    elements.push({ tag: "column_set", flex_mode: "none", background_style: "default", columns: [
+        { tag: "column", width: "weighted", weight: 1, vertical_align: "top", elements: [{ tag: "div", text: { content: `🔴 ${rc.high}高风险`, tag: "lark_md" } }] },
+        { tag: "column", width: "weighted", weight: 1, vertical_align: "top", elements: [{ tag: "div", text: { content: `🟡 ${rc.medium}中风险`, tag: "lark_md" } }] },
+        { tag: "column", width: "weighted", weight: 1, vertical_align: "top", elements: [{ tag: "div", text: { content: `🟢 ${rc.low}低风险`, tag: "lark_md" } }] },
+    ]});
+    
+    // 3. 已解决风险
+    if (data.resolvedRisks && data.resolvedRisks.length > 0) {
+        elements.push({ tag: "hr" });
+        elements.push({ tag: "div", text: { content: "**✅ 已解决/已解除的风险**", tag: "lark_md" } });
+        data.resolvedRisks.forEach((resolved, idx) => {
+            elements.push({ tag: "div", text: { content: `${idx + 1}. **${resolved.chat}**`, tag: "lark_md" } });
+            elements.push({ tag: "div", text: { content: `   🚨 风险报告：**${resolved.riskReporter || '未知'}**`, tag: "lark_md" } });
+            elements.push({ tag: "div", text: { content: `   📋 原风险：${resolved.originalRisk}`, tag: "lark_md" } });
+            elements.push({ tag: "div", text: { content: `   ✅ 解除人：**${resolved.resolver || '未知'}**`, tag: "lark_md" } });
+            elements.push({ tag: "div", text: { content: `   📝 解除说明：${resolved.resolution} (${resolved.resolutionTime})`, tag: "lark_md" } });
+            if (idx < data.resolvedRisks.length - 1) elements.push({ tag: "hr" });
+        });
+    }
+    
+    // 4. 非风险记录
+    const nonRisks = [];
+    if (data.lowRisks) {
+        data.lowRisks.forEach(risk => {
+            if (risk.cause && (risk.cause.includes('测试') || risk.cause.includes('澄清') || risk.conclusion.includes('已说明'))) {
+                nonRisks.push(risk);
+            }
+        });
+    }
+    if (nonRisks.length > 0) {
+        elements.push({ tag: "hr" });
+        elements.push({ tag: "div", text: { content: "**🚫 已排除的非风险记录**", tag: "lark_md" } });
+        nonRisks.forEach((item, idx) => {
+            elements.push({ tag: "div", text: { content: `${idx + 1}. **${item.chat}** - ${item.cause}`, tag: "lark_md" } });
+        });
+    }
+    
+    return { 
+        config: { wide_screen_mode: true }, 
+        header: { 
+            template: headerTemplate, 
+            title: { content: headerTitle, tag: "plain_text" } 
+        }, 
+        elements: elements 
+    };
+}
+
+function getCurrentTime() {
+    const now = new Date();
+    return now.toLocaleString('zh-CN', {
+        year: 'numeric',
+        month: '2-digit',
+        day: '2-digit',
+        hour: '2-digit',
+        minute: '2-digit'
+    });
+}
+
+async function main() {
+    // 检查凭证
+    if (!CREDENTIALS.appId || !CREDENTIALS.appSecret) {
+        console.error('❌ 未配置飞书应用凭证');
+        console.log('请设置环境变量 FEISHU_APP_ID 和 FEISHU_APP_SECRET，或运行配置向导');
+        process.exit(1);
+    }
+
+    // 检查推送目标
+    if (!CONFIG.pushTarget.chatId && !CONFIG.pushTarget.userId) {
+        console.error('❌ 未配置推送目标');
+        process.exit(1);
+    }
+
+    try {
+        const token = await getAccessToken();
+        const data = JSON.parse(fs.readFileSync(path.join(__dirname, 'risk-data.json'), 'utf8'));
+        data.checkTime = getCurrentTime();
+        const card = generateCard(data);
+        
+        // 根据配置推送
+        const { type, chatId, userId } = CONFIG.pushTarget;
+        
+        if ((type === 'chat' || type === 'both') && chatId) {
+            await sendCard(token, card, 'chat', chatId);
+            console.log(`✅ 卡片已推送到群聊: ${chatId}`);
+        }
+        
+        if ((type === 'user' || type === 'both') && userId) {
+            await sendCard(token, card, 'user', userId);
+            console.log(`✅ 卡片已推送到用户: ${userId}`);
+        }
+    } catch (e) {
+        console.error("❌ 推送失败:", e.message);
+        try {
+            const token = await getAccessToken();
+            if (token) await sendCard(token, generateCard(null), CONFIG.pushTarget.type, CONFIG.pushTarget.chatId || CONFIG.pushTarget.userId);
+        } catch (finalErr) {
+            console.error("Failed to send failure notification:", finalErr.message);
+        }
+    }
+}
+
+main();

package/skills/risk-alert/scripts/risk-alert.js

@@ -0,0 +1,136 @@
+#!/usr/bin/env node
+/**
+ * Risk Alert 全自动流程
+ * 
+ * 执行步骤：
+ * 1. 抓取群聊消息
+ * 2. AI 分析（通过调用 OpenClaw AI）
+ * 3. 推送预警卡片
+ */
+
+const { execSync, spawn } = require('child_process');
+const fs = require('fs');
+const path = require('path');
+
+const SCRIPTS_DIR = path.join(__dirname);
+const RAW_MESSAGES_MD = path.join(SCRIPTS_DIR, 'raw-messages.md');
+const RAW_MESSAGES_JSON = path.join(SCRIPTS_DIR, 'raw-messages.json');
+const RISK_DATA_JSON = path.join(SCRIPTS_DIR, 'risk-data.json');
+
+const command = process.argv[2];
+
+// 辅助函数：执行命令并返回输出
+function execCommand(cmd, args, options = {}) {
+    return new Promise((resolve, reject) => {
+        const child = spawn(cmd, args, {
+            cwd: SCRIPTS_DIR,
+            stdio: options.silent ? 'pipe' : 'inherit',
+            ...options
+        });
+        
+        let output = '';
+        if (options.silent && child.stdout) {
+            child.stdout.on('data', (data) => {
+                output += data.toString();
+            });
+        }
+        
+        child.on('close', (code) => {
+            if (code === 0) {
+                resolve(output);
+            } else {
+                reject(new Error(`Command failed with code ${code}`));
+            }
+        });
+        
+        child.on('error', reject);
+    });
+}
+
+// 仅抓取模式
+if (command === 'fetch') {
+    console.log('📥 抓取消息...');
+    execCommand('node', ['analyze-risk.js'])
+        .then(() => {
+            console.log('✅ 抓取完成');
+            process.exit(0);
+        })
+        .catch((e) => {
+            console.error('❌ 抓取失败:', e.message);
+            process.exit(1);
+        });
+    return;
+}
+
+// 仅推送模式
+if (command === 'push') {
+    console.log('📤 推送卡片...');
+    execCommand('node', ['push-beautiful.js'])
+        .then(() => {
+            console.log('✅ 推送完成');
+            process.exit(0);
+        })
+        .catch((e) => {
+            console.error('❌ 推送失败:', e.message);
+            process.exit(1);
+        });
+    return;
+}
+
+// 完整自动化流程
+async function runFullWorkflow() {
+    console.log('🚀 启动 Risk Alert 全自动流程\n');
+    
+    // Step 1: 抓取消息
+    console.log('📥 Step 1: 抓取群聊消息...');
+    try {
+        await execCommand('node', ['analyze-risk.js']);
+        console.log('✅ 消息抓取完成\n');
+    } catch (e) {
+        console.error('❌ 消息抓取失败:', e.message);
+        process.exit(1);
+    }
+    
+    // 检查是否有新消息
+    if (!fs.existsSync(RAW_MESSAGES_JSON)) {
+        console.error('❌ 未找到 raw-messages.json');
+        process.exit(1);
+    }
+    
+    const rawData = JSON.parse(fs.readFileSync(RAW_MESSAGES_JSON, 'utf8'));
+    if (rawData.newMessagesCount === 0) {
+        console.log('ℹ️ 没有新消息');
+        
+        // 推送无风险状态
+        const emptyRiskData = {
+            checkTime: new Date().toLocaleString('zh-CN'),
+            hasRisk: false,
+            riskCount: { high: 0, medium: 0, low: 0 },
+            chatDetails: (rawData.chats || []).map(c => ({ name: c.name, count: 0 })),
+            highRisks: [],
+            mediumRisks: [],
+            lowRisks: []
+        };
+        fs.writeFileSync(RISK_DATA_JSON, JSON.stringify(emptyRiskData, null, 2));
+        
+        console.log('📤 推送无风险状态...');
+        await execCommand('node', ['push-beautiful.js']);
+        console.log('✅ 完成');
+        return;
+    }
+    
+    console.log(`📊 新增 ${rawData.newMessagesCount} 条消息\n`);
+    
+    // Step 2: 输出提示，让 AI 继续执行
+    console.log('🧠 Step 2: 需要 AI 分析风险');
+    console.log('─────────────────────────────────');
+    console.log('\n⚠️  自动分析需要 AI 介入');
+    console.log('请确保 AI 助手完成以下步骤：');
+    console.log('  1. 读取 raw-messages.md');
+    console.log('  2. 分析风险并生成 risk-data.json');
+    console.log('  3. 调用: node risk-alert.js push');
+    console.log('\n或者手动执行完整流程...');
+}
+
+// 运行
+runFullWorkflow().catch(console.error);

package/skills/risk-alert/scripts/run-full.js

@@ -0,0 +1,60 @@
+#!/usr/bin/env node
+const { execSync } = require('child_process');
+const path = require('path');
+
+const SKILL_DIR = path.join(__dirname, '..');
+const SCRIPTS_DIR = path.join(SKILL_DIR, 'scripts');
+
+console.log('🚀 启动 Risk Alert 完整流程...\n');
+
+// Step 1: 抓取消息
+console.log('📥 Step 1: 抓取群聊消息...');
+try {
+    execSync('node analyze-risk.js', { 
+        cwd: SCRIPTS_DIR, 
+        stdio: 'inherit' 
+    });
+    console.log('✅ 消息抓取完成\n');
+} catch (e) {
+    console.error('❌ 消息抓取失败:', e.message);
+    process.exit(1);
+}
+
+// Step 2: AI 分析（提示用户）
+console.log('🧠 Step 2: AI 风险分析');
+console.log('─────────────────────────────────');
+console.log('请让 AI 助手执行以下操作：');
+console.log('1. 读取 scripts/raw-messages.md');
+console.log('2. 分析风险并更新 scripts/risk-data.json');
+console.log('3. 完成后继续 Step 3');
+console.log('─────────────────────────────────\n');
+console.log('等待 AI 分析完成...（按 Ctrl+C 跳过，手动执行）\n');
+
+// 等待用户确认
+const readline = require('readline');
+const rl = readline.createInterface({
+    input: process.stdin,
+    output: process.stdout
+});
+
+rl.question('AI 分析完成后，按 Enter 继续推送，或输入 "skip" 跳过: ', (answer) => {
+    rl.close();
+    
+    if (answer.toLowerCase() === 'skip') {
+        console.log('⏭️  已跳过，请手动执行: node push-beautiful.js');
+        process.exit(0);
+    }
+    
+    // Step 3: 推送卡片
+    console.log('\n📤 Step 3: 推送风险预警卡片...');
+    try {
+        execSync('node push-beautiful.js', { 
+            cwd: SCRIPTS_DIR, 
+            stdio: 'inherit' 
+        });
+        console.log('\n✅ 完整流程执行完毕！');
+    } catch (e) {
+        console.error('❌ 推送失败:', e.message);
+        process.exit(1);
+    }
+});

package/skills/risk-alert/trigger-risk-alert.sh

@@ -0,0 +1,35 @@
+#!/bin/bash
+# 触发 Risk Alert 工作流
+# 读取配置中的用户 ID 发送触发指令
+
+CONFIG_FILE="$(dirname "$0")/config.json"
+
+# 默认用户 ID（如果配置不存在）
+DEFAULT_USER_ID=""
+
+# 尝试从配置文件中读取用户 ID
+if [ -f "$CONFIG_FILE" ]; then
+    # 使用 node 读取 JSON 配置
+    USER_ID=$(node -e "
+        try {
+            const config = require('$CONFIG_FILE');
+            console.log(config.pushTarget?.userId || '');
+        } catch(e) {
+            console.log('');
+        }
+    " 2>/dev/null)
+fi
+
+# 如果没有配置用户 ID，使用默认值
+if [ -z "$USER_ID" ]; then
+    USER_ID="$DEFAULT_USER_ID"
+fi
+
+if [ -z "$USER_ID" ]; then
+    echo "❌ 未配置推送用户 ID"
+    echo "请先运行: node scripts/analyze-risk.js 进行配置"
+    exit 1
+fi
+
+# 使用 openclaw 工具发送消息
+/usr/local/bin/openclaw message send --channel feishu --target "user:$USER_ID" --message "[[internal_trigger:run_risk_alert_workflow]]"