文档可视化

PassAudited by ClawScan on May 10, 2026.

Overview

This skill appears to be a purpose-aligned document-to-dashboard converter, with normal local file parsing and Playwright export behavior, but users should note its manual dependencies and Feishu helper/provenance gap.

This looks reasonable for converting documents into visual dashboards. Before installing, be aware that it reads the documents you provide, writes generated outputs to the OpenClaw workspace, launches Playwright/Chromium for export, and relies on unpinned manual dependencies plus an unreviewed Feishu helper module.

Findings (4)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

What this means

Documents you give to the skill may be read and transformed into generated dashboard files.

Why it was flagged

The skill accepts local file paths and parses user-selected documents, which is expected for a document visualizer but means the agent can read the contents of files the user provides.

Skill content
elif os.path.isfile(input_str): ... return {"type": "pdf", "value": input_str}
Recommendation

Only provide documents and file paths you intend to convert, especially if they contain confidential business or personal data.

What this means

The skill will run a headless browser locally when exporting dashboards.

Why it was flagged

The skill launches Playwright/Chromium to render the generated local HTML and export PDF/PNG. This is disclosed and central to the export feature.

Skill content
b = p.chromium.launch(headless=True) ... page.goto(html_url, wait_until="networkidle") ... page.pdf(...) ... page.screenshot(...)
Recommendation

Keep Playwright/Chromium updated and avoid converting untrusted documents if you are concerned about generated HTML content being rendered.

What this means

Installing the skill may require pulling third-party packages and a browser runtime from external package sources.

Why it was flagged

The skill documents manual, unpinned dependency installation rather than an install spec or lockfile. These dependencies are purpose-aligned but their exact versions and provenance are not fixed.

Skill content
pip install python-docx openpyxl pdfplumber pandas playwright
playwright install chromium
Recommendation

Install dependencies from trusted package indexes, consider pinning versions, and review the environment before use.

What this means

Feishu link conversion may fail or may rely on an external/local helper whose implementation was not included in this review.

Why it was flagged

The Feishu document path depends on a helper module that is referenced by code but not included in the provided manifest or install metadata.

Skill content
from feishu_fetch_doc import fetch_doc
Recommendation

Verify the source and behavior of the feishu_fetch_doc helper before using the Feishu document feature.