Skill flagged — suspicious patterns detected
ClawHub Security flagged this skill as suspicious. Review the scan results before using.
ERP Tax Filler
v1.0.0Fill ERP financial data (资产负债表, 利润表, 现金流量表) into official tax bureau Excel templates (.xls/.xlsx) while preserving all formatting, formulas, styles, colors,...
⭐ 0· 56·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Suspicious
medium confidencePurpose & Capability
Name/description align with the included scripts: the code reads ERP .xls exports, unpacks .xlsx to XML, updates cached cell <v> values, removes calcChain, and repacks — all coherent with 'preserve formulas/styles while filling templates'. There are no unrelated network calls, credentials, or unrelated binaries requested.
Instruction Scope
SKILL.md instructs use of Excel COM (PowerShell) to convert .xls → .xlsx. Opening workbooks via COM can run Workbook_Open/Auto_Open macros: the instructions do not advise disabling macros or setting AutomationSecurity, which is a real code-execution risk if templates or ERP exports contain macros. The rest of the runtime instructions (unpack, edit only <v>, delete calcChain, repack) match the scripts, but the docs also warn against openpyxl while the code imports xlutils.copy (docstring mentions it) — a minor inconsistency. Also the script contains hardcoded fallback numeric values for some profit rows (could insert unexpected defaults when ERP data is missing).
Install Mechanism
No install spec or external downloads; all code files are included in the skill bundle. That reduces supply-chain risk. The scripts depend on Python packages (xlrd, xlutils) that must be present in the runtime environment but there is no installer here.
Credentials
The skill requests no environment variables, no credentials, and accesses only local files supplied by the user. There is no evidence of credential exfiltration or unrelated secret access in the code.
Persistence & Privilege
always:false and user-invocable; the skill does not request persistent or system-wide changes and does not modify other skills or global agent settings. It runs only when invoked.
What to consider before installing
This skill appears to do what it claims (XML-editing of .xlsx to preserve formulas/styles), but take these precautions before using it or installing it into an agent:
- Do not run it on production/original templates — always test on copies and keep backups.
- The SKILL.md recommends converting .xls via Excel COM. Opening files in Excel via COM can execute macros (Workbook_Open, Auto_Open). If you need to use Excel automation, ensure macros are disabled (e.g., set Application.AutomationSecurity = msoAutomationSecurityForceDisable) or otherwise ensure templates are trusted and free of malicious VBA.
- The unpack/pack/edit flow will remove xl/calcChain.xml and repack the archive; if the workbook contains VBA (vbaProject.bin) or is macro-enabled (.xlsm), converting/saving as .xlsx or repacking may strip or break macros. The unpacker warns about vbaProject.bin — heed that.
- The scripts assume presence of Python packages (xlrd, xlutils). The bundle includes no installer; confirm these dependencies and test in a controlled environment.
- There are hardcoded fallback numeric values in the profit-table mapping — if ERP data for those lines is missing the script will insert those defaults; review and adjust if that is unacceptable.
- Minor doc/code mismatch: SKILL.md strongly warns against using xlutils/openpyxl in some places but erp_fill.py imports xlutils.copy (though it doesn't appear to actually use it). Treat this as a small maintainability/quality issue and review the code before running.
If you intend to use this in an automated/agent context, require user confirmation before running and ensure the environment disallows unintended macro execution. If you cannot review the templates and code yourself, consider this skill suspicious and avoid running it on sensitive data.Like a lobster shell, security has layers — review code before you run it.
latestvk97dr07yg2q1j8z0qvg5bjqejx83knzn
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
