人群宇宙投放追踪周报

This appears to be an internal reporting tool that legitimately needs access to your company's RedBI data, so its behavior (reading an SSO cookie, calling internal APIs, downloading CSVs and images, generating HTML and publishing Redoc) makes sense — but there are important transparency gaps: the skill metadata does not declare the SSO credential or the dependency on another skill's run-sso.sh helper, nor does it list required runtime tools (bunx, @xhs/hi-workspace-cli, Python libs). Before installing or enabling: 1) Confirm you trust the skill author and that this will run only in a controlled internal environment. 2) Verify the presence and safety of /home/node/.token/sso_token.json and /app/skills/data-fe-common-sso/script/run-sso.sh (audit those files). 3) Ensure required runtimes (bunx, Python packages) are available and that publishing to Redoc uses internal endpoints only. 4) Be aware the skill will start a local HTTP preview (pod_ip:18765) — confirm that serving this port is allowed and not exposed to public network. If you need higher assurance, ask the maintainer to update metadata to declare required config paths/credentials and dependency tools or to provide a reviewed install manifest.