招标文件解析
PassAudited by ClawScan on May 10, 2026.
Overview
This skill appears to do what it says—parse user-provided bidding documents and create local reports—but users should notice that it runs bundled Python scripts and relies on Python packages not declared in an install spec.
Before installing, be aware that this skill processes the documents you provide using local Python scripts and writes report files to disk. This is appropriate for its purpose, but for confidential bidding documents you should use a trusted workspace and confirm required Python packages come from trusted sources.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The skill may read the document paths you provide and create or modify report files locally.
The skill directs the agent to execute bundled Python scripts to extract PDF text and convert reports to DOCX. This is expected for the document-processing purpose, but users should understand local code will run.
py scripts/extract_pdf_with_pages.py "PDF文件路径" ... py scripts/md_to_docx.py "招标文件解析报告_XXX_YYYYMMDD.md" "招标文件解析报告_XXX_YYYYMMDD.docx"
Use it only on documents you intend to process, keep outputs in a controlled workspace, and review the bundled scripts or package dependencies if your documents are sensitive.
Users have less registry-level information about the skill source and may need to manage Python/runtime dependencies themselves.
The skill includes runnable scripts, but the registry metadata provides limited provenance and no formal installation specification.
Source: unknown; Homepage: none; No install spec — this is an instruction-only skill.
Verify the skill source if provenance matters, and install any required Python packages only from trusted package repositories.