Skill flagged — suspicious patterns detected
ClawHub Security flagged this skill as suspicious. Review the scan results before using.
sensors-analytics-doc-gen-2
v1.0.2将神策（Sensors Analytics）元数据管理、人群、标签手册转换为飞书使用说明文档。支持元事件、事件属性、虚拟属性、虚拟事件、维度表、物品属性、人群、标签等功能模块。元数据管理模块需要一次性处理6个手册链接并整合。触发词：生成使用说明、创建手册、文档生成，神策手册。
⭐ 0· 70·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Suspicious
medium confidencePurpose & Capability
Name/description align with the instructions: the SKILL.md describes fetching Sensors Analytics manual pages and producing Feishu-formatted documents. The use of web_fetch and a feishu_create_doc action is consistent with the transformation/creation goal.
Instruction Scope
Instructions explicitly direct the agent to fetch specific sensorsdata.cn pages (or user-provided links) and to create Feishu documents using a feishu_create_doc tool; they do not instruct reading local files or unrelated environment variables. The skill will fetch up to 50k characters per page and aggregate six manuals for the metadata module.
Install Mechanism
Instruction-only skill with no install spec and no code files, so nothing will be written to disk by an installer.
Credentials
SKILL.md expects to call feishu_create_doc (i.e., create docs in Feishu) but the skill metadata declares no required environment variables or primary credential. If feishu_create_doc requires Feishu API credentials or workspace tokens, the skill should declare them; omission is a mismatch and a potential risk (unexpected document creation or ambiguous credential usage).
Persistence & Privilege
always:false (normal). The skill can be invoked autonomously by the agent (platform default). Because the skill will create external documents, you should confirm how Feishu auth is provisioned and whether you want autonomous document creation enabled.
What to consider before installing
This skill is coherent for converting Sensors Analytics manuals to Feishu docs, but before installing: (1) confirm how feishu_create_doc is authenticated — ask the author which Feishu credentials or integration are required and what scopes the token needs; the skill metadata currently declares no env vars or primary credential. (2) Verify you want the agent to be able to create Feishu docs automatically (agent-autonomous invocation is allowed by default). (3) Ensure any user-provided URLs are the official Sensors Analytics pages you expect (the SKILL.md prefers manual.sensorsdata.cn). (4) If you need stricter controls, ask the author to update the skill metadata to declare required env vars (e.g., FEISHU_TOKEN or similar) and to document where generated docs will be created and their visibility. If the author cannot clarify the Feishu auth flow, treat the skill as risky and avoid granting it access to your Feishu workspace.Like a lobster shell, security has layers — review code before you run it.
latestvk9740j0m390qyvr04m2a4dearx83qtfc
License
MIT-0
Free to use, modify, and redistribute. No attribution required.