Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

室内设计自动预算生成器

v1.0.0

根据DXF户型图和设计师历史报价自动生成符合本地市场的完整家装工装预算Excel,支持楼层空间分配,保留原模板格式。

0· 71·0 current·0 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for 137984917-cyber/interior-budget-auto.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "室内设计自动预算生成器" (137984917-cyber/interior-budget-auto) from ClawHub.
Skill page: https://clawhub.ai/137984917-cyber/interior-budget-auto
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install interior-budget-auto

ClawHub CLI

Package manager switcher

npx clawhub@latest install interior-budget-auto
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
!
Purpose & Capability
The skill claims to run locally and only needs DXF input, but the Python code unconditionally opens a hardcoded JSON library at /Users/laobaobei/.openclaw/workspace/标准预算项目库.json. SKILL.md and skill.json do not document this required data file or its format, so the code's real runtime requirements do not match the declared ones.
!
Instruction Scope
SKILL.md tells users to run generate_budget.py with an input DXF and output XLSX and asserts '完全本地运行', but the script expects a specific local JSON database file (DEFAULT_LIBRARY) that is not mentioned. The instructions give no fallback or way to supply the library path, so the runtime behavior is under-specified and may fail or read unexpected files on the host.
Install Mechanism
No install spec or external downloads are present. Dependencies are standard Python packages (ezdxf, openpyxl, optional python-pptx) and there is no code that fetches remote artifacts at runtime.
!
Credentials
The skill declares no required environment variables or config paths, yet the code reads a specific path inside a user's home directory. That implicit filesystem access is disproportionate to the documented requirements. There are also inconsistent JSON key usages (e.g., checking p['综合单价'] but later using p['combined_price']), indicating assumptions about the library file structure that are not declared.
Persistence & Privilege
The skill does not request persistent/always-on privileges and does not modify other skills or system-wide configuration. It runs as a one-off script when invoked.
What to consider before installing
Before installing or running this skill: 1) Inspect or search your system for the file /Users/laobaobei/.openclaw/workspace/标准预算项目库.json — the script expects it but the docs never mention it. If you don't want the script to read that path, open generate_budget.py and change DEFAULT_LIBRARY to a safe, documented location or modify the script to accept a library-file argument. 2) Verify the JSON library format (field names like 'combined_price' vs '综合单价') to avoid runtime errors or incorrect pricing; the code mixes Chinese and English keys which looks like a bug. 3) Run the script in an isolated environment (non-privileged account or VM) the first time to confirm it behaves as expected—there are no network calls in the code, but the hardcoded user path could expose local data if you run it with an account that has sensitive files. 4) Ask the author (if possible) for a documented sample of 标准预算项目库.json or an option to supply the library path on the command line. If you cannot confirm these, treat the skill as untrusted and avoid running it against sensitive hosts or data.

Like a lobster shell, security has layers — review code before you run it.

latestvk97agp0z7kxw277hwe4ktew74584tdf0
71downloads
0stars
1versions
Updated 1w ago
v1.0.0
MIT-0

室内设计自动预算生成器

描述

从DXF提取户型信息,基于设计师历史报价库自动生成完整家装/工装预算Excel,严格匹配原有模板格式,不漏项,价格贴合本地市场。

功能

  • 自动提取DXF户型文字信息,确认层数面积
  • 基于设计师历史报价自动构建标准项目库
  • 按楼层/空间自动分配项目,估算工程量
  • 生成和原有模板格式完全一致的Excel预算表
  • 支持家装/工装两种模式

作者

老冷 @ 温州隐室空间设计

分类

设计工具 / 预算自动化

触发词

  • 生成预算
  • 预算自动生成
  • 室内设计预算
  • 家装预算

依赖

  • python3
  • openpyxl
  • ezdxf
  • python-pptx (可选,用于PPT生成)

使用方法

  1. 设计师在CAD中将图纸导出为DXF格式
  2. 放入指定文件夹
  3. 运行 generate_budget.py /path/to/your/file.dxf output.xlsx
  4. 等待生成,直接拿到可编辑的预算表
  5. 微调工程量即可交付客户

优势

  • 保留设计师原有报价体系,贴合本地市场价
  • 半小时出初稿,比手工快10倍
  • 不漏小项目(钢筋、纤维网这些不容易漏了)
  • 完全本地运行,数据不外出

示例

python generate_budget.py ~/Desktop/项目/户型.dxf ~/Desktop/龙虾/项目预算.xlsx

Comments

Loading comments...