Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Cost Report Generator

v1.0.0

从项目费用 Excel 文件(如 EVP 项目费用.xlsx)自动生成按客户分类的成本分析报告。支持帝国、BAT、MT、ITMS 等客户分类,包含 2025 年和 2026 年成本分析,自动计算年度汇总、月度明细、月均数据。使用场景:用户发送类似"EVP 项目费用.xlsx"的文件并要求生成成本分析报告,或提到"...

0· 60·1 current·1 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for richard052317/cost-report-generator.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Cost Report Generator" (richard052317/cost-report-generator) from ClawHub.
Skill page: https://clawhub.ai/richard052317/cost-report-generator
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install cost-report-generator

ClawHub CLI

Package manager switcher

npx clawhub@latest install cost-report-generator
Security Scan
VirusTotalVirusTotal
Pending
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
Name/description align with the included Python script: the script reads an Excel file, aggregates costs by customer categories, and writes a styled workbook. However, the SKILL.md does not declare required Python packages (pandas, openpyxl) and the documentation's claimed default header row (第 4 行 / index 3) does not match the script's current pd.read_excel header=1; that mismatch is functionally important.
!
Instruction Scope
Instructions tell the agent/user to run the provided script locally and to call generate_cost_report() from Python. The script itself performs only local file I/O and Excel processing (no network, no env var access). The main concern: SKILL.md and the script disagree about default header row and some examples/comments in the script mention different header behavior (header=1 vs header index 3). This can cause empty reads or incorrect aggregation. Also SKILL.md requires very strict styling; the script attempts to apply those styles but relies on local fonts (微软雅黑) which may not exist.
Install Mechanism
There is no install spec (instruction-only), which is low risk, but the script has runtime dependencies (pandas, openpyxl) that are not declared. Users must install these themselves; the lack of declared dependencies is a usability and maintenance gap.
Credentials
The skill does not request environment variables, credentials, or external config paths. It only works on local files supplied by the user and writes output locally — proportional to its purpose.
Persistence & Privilege
always is false and the skill does not request persistent elevated privileges or modify other skills. Normal local execution only.
What to consider before installing
This skill appears to be what it says (an Excel cost-report generator) and shows no network/exfiltration behavior, but there are practical inconsistencies you should address before trusting it with real data: - Header-row mismatch: SKILL.md instructs the header is on row 4 (index 3) but the script currently reads header=1. Test the script on a representative Excel file and adjust the header parameter in code or when calling the function to ensure correct parsing. Incorrect header selection will produce empty or wrong aggregations. - Missing dependency instructions: The script requires pandas and openpyxl. Install them (e.g., pip install pandas openpyxl) before running. - CLI behavior: The SKILL.md shows a CLI usage pattern; inspect the rest of the script (end of file) to confirm it implements argument parsing. If not, call the function from Python as shown. - Styling/fonts: The script uses the font '微软雅黑' and strict colors; if that font isn't available on your system, Excel output may render differently. This is a usability issue, not a security issue. - Data scope: Only rows with customer types ['帝国','BAT','MT','ITMS'] are processed; other customer values will be ignored. Make sure your data matches these values or update valid_customers. Recommended safe steps: run the script on a small non-sensitive sample first, inspect the generated workbook, and if you plan to use it in production add a requirements note or a small install script to install dependencies and confirm header/column naming expectations.

Like a lobster shell, security has layers — review code before you run it.

latestvk97cv3y6dpr44v33qpxw485hgn850t6d
60downloads
0stars
1versions
Updated 1w ago
v1.0.0
MIT-0

成本分析报告生成器

从项目费用 Excel 文件自动生成按客户分类的成本分析报告。

触发条件

当用户:

  • 上传类似 EVP 项目费用.xlsx 的文件并要求生成成本分析报告
  • 提到"按客户分类生成成本报告"、"提炼成本分析"、"整理项目费用"
  • 发送包含客户费用数据的 Excel 文件

核心功能

  1. 自动识别客户分类:帝国、BAT、MT、ITMS 等
  2. 费用分类汇总
    • HR 费用(人工费用)
    • 试产/打样费用(打样 + 制造 + 物料耗用)
    • 测试费用(测试 + 外发认证)
    • 开发投资(开模 + 改模)
    • 其他费用(IDC、品烟、其它、手板)
  3. 时间维度:2025 年(12 个月)、2026 年(1-2 月)
  4. 数据指标:年度汇总、月均、月度明细
  5. 格式化输出:千分符、两位小数、美化样式

使用方法

方式 1:直接运行脚本

python3 ~/.openclaw/workspace/skills/cost-report-generator/scripts/generate_cost_report.py <源文件路径> [输出目录]

示例:

python3 ~/.openclaw/workspace/skills/cost-report-generator/scripts/generate_cost_report.py ~/Desktop/EVP_项目费用.xlsx

方式 2:通过 Python 调用

from scripts.generate_cost_report import generate_cost_report

output_file = generate_cost_report(
    source_file="/path/to/EVP_项目费用.xlsx",
    output_dir="/path/to/output"  # 可选,默认为源文件所在目录
)

输入文件格式

必需列

  • 客户大类:客户分类(帝国、BAT、MT、ITMS 等)
  • 项目大类:项目名称/类别
  • 内部订单号:订单编号

费用列(按年份和月份)

支持的费用类型:

  • 人工费用
  • 打样费用
  • 制造费用
  • 物料耗用
  • 测试费用
  • 外发认证费用
  • 开模费用
  • 改模费用
  • IDC 费用
  • 品烟费用
  • 其它费用
  • 手板费用

列名格式:{年份} 年{月份} 月{费用类型},如:

  • 25 年 1 月人工费用
  • 25 年打样费用(年度汇总)
  • 26 年 1-2 月人工费用

表头位置

脚本默认使用第 4 行(索引 3)作为表头。如果源文件格式不同,需要调整 header 参数。

输出报告结构

工作表

  1. 2025 年成本分析:按客户分类展示 2025 年 1-12 月数据
  2. 2026 年成本分析:按客户分类展示 2026 年 1-2 月数据

列结构(每个客户分类)

列范围内容
A-C基本信息(客户大类、项目大类、内部订单号)
D-EHR 费用(汇总、月均)
F-RHR 费用月度明细(1-12 月)
S-T试产/打样费用(汇总、月均)
U-AG试产/打样费用月度明细
...其他费用类别同理
最后两列总计(汇总、月度合计)

样式特点(必须严格遵守)

  • 表头:深蓝色背景 (#2E74B5) + 白色文字,微软雅黑字体
  • 子标题:浅蓝色背景 (#D6EAF8) + 深色文字
  • 数据行:交替使用白色/浅灰色背景 (#F8F9FA),便于阅读
  • 总计列:黄色高亮 (#FFEB9C) + 粗体,突出显示
  • 月度合计:绿色高亮 (#C6EFCE) + 粗体
  • 数字格式#,##0.00(千分符 + 两位小数),所有数值统一
  • 对齐方式:文本左对齐,数字右对齐
  • 列宽:基本信息列加宽(14-20),月度列统一(10),总计列加宽(14)
  • 边框:细边框 + 浅灰色 (#CCCCCC)

月均计算逻辑

  • 2025 年:年度汇总 ÷ 12
  • 2026 年:年度汇总 ÷ 2(因为只有 1-2 月数据)

脚本会自动统计实际有数据的月份数,并按以下规则计算:

max_months = 2 if year == 2026 else 12
divisor = min(actual_months_count, max_months)
monthly_avg = monthly_sum / divisor

注意事项

  1. 表头位置:确保源文件的表头在第 4 行(索引 3),否则需要调整 header 参数
  2. 客户分类:只处理"帝国"、"BAT"、"MT"、"ITMS"四类,其他会被忽略
  3. 数据完整性:如果某些月份数据缺失,月均计算会自动调整除数
  4. 输出位置:默认保存到源文件所在目录,可通过 output_dir 参数指定

故障排除

问题:读取数据为空

原因:表头位置不正确

解决:检查源文件的表头位置,修改脚本中的 header 参数:

df = pd.read_excel(source_file, sheet_name='Sheet1', header=3)  # 调整为正确的行号

问题:费用数据为 0

原因:列名格式不匹配

解决:检查源文件的列名格式,确保包含"年"、"月"等关键字,如25 年 1 月人工费用

问题:客户分类缺失

原因:客户大类列的值与预期不符

解决:检查"客户大类"列的实际值,必要时在脚本的 valid_customers 列表中添加新的客户类型

相关文件

  • 脚本scripts/generate_cost_report.py - 核心生成脚本

分享与发布

本地使用(当前用户)

技能已安装在 ~/.openclaw/workspace/skills/cost-report-generator/,当前 OpenClaw 会话可直接使用。

分享给其他飞书用户

方式 1:通过 ClawHub 发布(推荐)

# 1. 登录 ClawHub
clawhub login

# 2. 发布技能
clawhub publish ~/.openclaw/workspace/skills/cost-report-generator \
  --slug cost-report-generator \
  --name "成本分析报告生成器" \
  --version 1.0.0 \
  --changelog "初始版本:支持 EVP 项目费用文件自动生成成本分析报告"

其他用户安装:

clawhub install cost-report-generator

方式 2:直接共享技能文件夹

~/.openclaw/workspace/skills/cost-report-generator/ 打包发送给其他用户,让他们放到自己的 ~/.openclaw/workspace/skills/ 目录下。

方式 3:通过 OpenClaw 团队空间

如果多个用户共享同一个 OpenClaw workspace,技能会自动对所有用户可见。

技能元数据(发布用)

name: cost-report-generator
version: 1.0.0
description: 从项目费用 Excel 自动生成按客户分类的成本分析报告
author: Richard 张
tags: [成本分析,财务报告,Excel, 飞书]

Comments

Loading comments...