Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

文档可视化 - 一键生成深色指挥中心风格HTML看板 支持飞书文档/Word/PDF/Excel/Txt,5种主题可选,自动导出PDF/长图

v1.0.0

一键将飞书文档/Word/PDF/Excel/Txt转换成深色指挥中心风格HTML看板,支持5主题,可导出PDF和长图。

1· 59·0 current·0 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for lzm2023/doc-visualizer.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "文档可视化 - 一键生成深色指挥中心风格HTML看板 支持飞书文档/Word/PDF/Excel/Txt,5种主题可选,自动导出PDF/长图" (lzm2023/doc-visualizer) from ClawHub.
Skill page: https://clawhub.ai/lzm2023/doc-visualizer
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install doc-visualizer

ClawHub CLI

Package manager switcher

npx clawhub@latest install doc-visualizer
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
Name/description align with the code: parser functions for PDF/DOCX/Excel/TXT, HTML generator, and Playwright-based export are present. However the code imports a feishu_fetch_doc module for fetching Feishu documents even though the skill declares no dependency or credential for Feishu access — that is an unexplained mismatch.
!
Instruction Scope
SKILL.md instructs the agent to accept Feishu links and attachments and to install dependencies via pip/playwright. The runtime code references network operations (fetching Feishu docs and possibly handling URLs) and writes output under ~/.openclaw/workspace/visual_exports/. The SKILL.md does not declare or explain how Feishu auth is handled (no env vars) and the code will attempt to import an external feishu_fetch_doc module which is not bundled — this expands scope beyond what was declared.
Install Mechanism
No install spec is embedded; dependencies are documented in SKILL.md as pip packages (python-docx, openpyxl, pdfplumber, pandas, playwright). That is a standard approach and no external arbitrary download URLs or archive extraction are present in the package itself.
!
Credentials
The skill requests no environment variables, yet it promises to fetch private Feishu documents. The code expects a feishu_fetch_doc import (not included) which likely requires credentials; omission of any Feishu credential declarations is disproportionate and ambiguous. Also running Playwright will download a browser binary (not declared as a platform action) and the Chromium instance may perform network requests when rendering local HTML.
Persistence & Privilege
always is false and the skill doesn't request persistent system-wide privileges. It writes outputs to a per-user workspace directory (~/.openclaw/workspace/visual_exports/) which is reasonable for exported files.
What to consider before installing
This skill appears to implement the advertised document→HTML/PDF functionality, but there are practical and security concerns you should consider before installing or running it: - Missing/undeclared Feishu support: the code imports feishu_fetch_doc.fetch_doc but that module is not bundled and no Feishu credentials or env variables are declared. If you plan to use Feishu links, ask the author how authentication is handled and where the feishu_fetch_doc dependency comes from. Do not supply your Feishu credentials until you verify the module's source. - Runtime failures and buggy code: the source shows some suspicious string/indexing logic (e.g., timeline extraction slices) and other minor bugs that may crash or behave unexpectedly. Expect to run it in a test environment first. - Network behavior during export: Playwright opens a headless Chromium and renders a local HTML file. If the generated HTML references remote resources (images, fonts, analytics), the browser may make outbound network requests during page.goto(networkidle). If you need to prevent any network access, run the exporter in an isolated/network-restricted environment. - Dependency installation: installing Playwright will download browser binaries (playwright install chromium). Perform installs in a controlled environment (virtualenv, container) and review required pip packages. - File output and review: the skill writes exported files under ~/.openclaw/workspace/visual_exports/{timestamp}/. Review generated HTML before rendering if the input documents contain untrusted content (embedded scripts or remote resource links) to avoid accidental remote loading. If you decide to use it: run it on non-sensitive sample documents first, verify or replace the feishu_fetch_doc dependency with a vetted fetcher, sandbox the Playwright browser (or block network), and inspect generated HTML to ensure no unintended remote content is loaded.

Like a lobster shell, security has layers — review code before you run it.

latestvk971ke9bg3kmsjjqf7r3h0mnzs85c5e4
59downloads
1stars
1versions
Updated 4d ago
v1.0.0
MIT-0

文档可视化 Skill

将任意格式文档(飞书文档/Word/PDF/Excel/Txt)一键生成深色指挥中心风格HTML可视化看板 + PDF/长图。

触发方式

用户在飞书发送以下任意形式即可自动触发:

  • 飞书文档链接(如 https://my.feishu.cn/docx/xxx
  • 附件文件(Word/Excel/PDF/Txt)
  • 任何包含数据的内容文本

使用流程

用户发送文档
    ↓
[Step 1] 解析文档(自动识别格式)
    ↓
[Step 2] 数据分析 + 生成可视化配置
    ↓
[Step 3] 生成5种主题HTML供用户选择
    ↓
[Step 4] 用户确认主题
    ↓
[Step 5] Playwright导出PDF + 长图
    ↓
[Step 6] 发送文件路径给用户

5种主题(发送时指定)

主题参数风格
科技蓝--theme THEME_BLUE顾家原版深蓝
商务红--theme THEME_RED红黑商务
自然绿--theme THEME_GREEN绿色清新
皇家紫--theme THEME_PURPLE紫金高端
活力橙--theme THEME_ORANGE橙暖活力

示例指令: "帮我把这个飞书文档做成可视化看板,用皇家紫主题"

支持格式

格式解析方案
飞书文档链接feishu_fetch_doc → markdown解析
Word (.docx)python-docx
Excel (.xlsx)openpyxl(多Sheet)
PDF (.pdf)pdfplumber
Txt / CSV直接字符串读取

可视化组件(自动匹配)

根据文档内容自动选择最合适的可视化方式:

  • 📊 财务卡片网格 - 自动提取数字指标
  • 📰 时间轴 - 2024/2025/2026年份事件
  • ⚔️ 对比表 - 多列数据对比
  • 💼 SWOT四象限 - 优势/劣势/机会/威胁
  • 🚀 四维战略分析 - 进攻/防守/机会/威胁
  • 📋 通用数据表格 - 结构化数据
  • 📚 来源分布统计 - emoji统计图
  • 🎯 访谈切入点 - 场景+话题建议

技术栈

  • 解析:python-docx / openpyxl / pdfplumber
  • HTML生成:自定义模板(CSS变量主题系统,无外部依赖)
  • 导出:Playwright page.pdf() + screenshot(full_page=True)
  • 文件输出:~/.openclaw/workspace/visual_exports/{timestamp}/

文件结构

skills/doc-visualizer/
├── SKILL.md               ← 本文件
├── doc_visualizer.py      ← 主入口(CLI + 模块)
├── generator/
│   └── html_generator.py  ← HTML生成器(5种主题CSS内嵌)
└── exporter/
    └── exporter.py         ← PDF/长图导出(Playwright)

CLI用法

python doc_visualizer.py <文件路径> [--theme THEME_XXX]

# 示例
python doc_visualizer.py /path/to/report.xlsx --theme THEME_PURPLE
python doc_visualizer.py https://my.feishu.cn/docx/xxx --theme THEME_GREEN

Python模块调用

from doc_visualizer import run, parse_input, analyze_data

# 方式1:完整流程
result = run("/path/to/file.xlsx", theme="THEME_BLUE")
# 返回: {"html": path, "pdf": path, "png": path, "output_dir": path}

# 方式2:分步调用
info = parse_input("/path/to/file.xlsx")
parsed = parse_document(info)
viz_config = analyze_data(parsed)

依赖安装

pip install python-docx openpyxl pdfplumber pandas playwright
playwright install chromium

Comments

Loading comments...