德胧P&L分析Skill
ReviewAudited by ClawScan on May 10, 2026.
Overview
This looks like a local hotel P&L analyzer, but review is recommended because it claims official/real corporate data without verifiable provenance and describes storing financial analysis history without clear controls.
Before installing, verify that this is actually an official Delonix skill and that the embedded benchmarks are authorized and current. Avoid entering confidential P&L or operating data unless you understand whether it will be stored, reused, or passed to other skills, and prefer a version with clear data-retention controls and pinned dependencies.
Findings (4)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
Users may trust the outputs as official corporate guidance or real internal benchmarks when that provenance is not verifiable from the artifacts.
The skill asserts official status and use of group-measured data; combined with the provided metadata showing unknown source and no homepage, users cannot verify this authority claim before relying on the analysis.
版本：v3.0 · 德胧集团官方版 ... 数据源：开元名庭动态模型202603 + 集团实测数据
Verify the publisher and official authorization before relying on the data; the skill should label its data sources, limitations, and verification status clearly.
Confidential hotel P&L data could be retained or reused across later sessions without the user understanding where it is stored or how to remove it.
The design describes persistent storage of hotel configuration, historical data, preferences, and analysis records, which may include sensitive business financial information, but it does not specify scope, retention, deletion, or approval controls.
配置管理 | JSON配置文件 + 记忆系统 | 支持个性化参数持久化 ... 记忆学习层 ... 历史数据 ... 偏好设置 ... 分析记录
Require explicit user consent before saving data, declare the storage path and retention period, provide deletion/opt-out instructions, and avoid reusing saved financial context unless the user asks.
Sensitive business data might be passed to other tools or skills during analysis if the agent follows this design.
The design says the skill may call other skills for market analysis, chart generation, Excel import/export, and ML analysis; this is purpose-aligned, but the artifact does not define what financial data is shared or how users approve those transfers.
已集成技能 ... sector-hotness-analysis ... echart ... excel_master ... data-ml-analysis ... 调用方式
Ask for confirmation before passing P&L data to other skills, and disclose which data fields are being shared for each delegated task.
If a user manually installs the dependency, they rely on the package source and version available at install time.
Chart generation documents an optional external Python package, but the artifacts provide no pinned install spec; this is common and purpose-aligned, but users should know what they are installing.
依赖：pip install pyecharts
Provide a pinned dependency specification and instruct users to install packages only from trusted sources.