ClawHub

Report Generator EN

v1.0.1

Generates clear, structured weekly work reports from natural language input, tailored by role with insight-driven analysis and customizable tone.

⭐ 0· 69·0 current·0 all-time
byRashed Al Mamoon@rashed-mamoon
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Pending
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description align with the actual content: SKILL.md is a prompt + template library for generating weekly reports. The skill requests no binaries, env vars, or config paths, which is appropriate for a prompt-only report generator.
✓
Instruction Scope
Runtime instructions are limited to asking the user for role/context and transforming user-provided text into structured reports. The file does not instruct the agent to read system files, access external endpoints, or access credentials. It does recommend attaching historical Markdown files for trend analysis, but that is a user-driven action (the skill does not autonomously fetch external data).
✓
Install Mechanism
No install spec and no code files — lowest-risk model. The skill is purely prompt/template content and writes nothing to disk.
✓
Credentials
No environment variables, secrets, or credentials are required. The requested inputs are user-provided report data and optional historical files, which are proportionate to the skill's stated purpose.
✓
Persistence & Privilege
always:false and user-invocable:true (defaults) — the skill does not request persistent or elevated platform privileges and does not modify other skills or system settings.
Scan Findings in Context
[unicode-control-chars] unexpected: The static scanner flagged unicode control characters in SKILL.md (a common prompt-injection vector). The included CHANGELOG.md explicitly states the Zero Width Joiner (U+200D) was removed to address this. Still, because the skill source is 'unknown', the finding is worth verifying before use (check the actual SKILL.md you paste into a system prompt).
Assessment
This skill is an instruction-only prompt for generating weekly reports and appears coherent with no credential or install requests. Before using it: 1) Inspect the SKILL.md you will paste (verify no hidden unicode/control characters or unexpected instructions); 2) Test with non-sensitive sample data first; 3) Avoid pasting confidential company secrets or full documents unless you trust the runtime and want those contents processed; 4) Prefer copying only the templates or sections you need rather than using an unknown full-file system prompt; 5) Because the source/homepage is unknown, consider hosting a vetted copy in a trusted location or reviewing changes in the changelog before regular use.

Like a lobster shell, security has layers — review code before you run it.

latestvk972k0xfyzjmvg8w0j66h8r00h83pwv7

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments