Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

专业行业研究报告生成器

v1.0.0

生成行业深度研究报告。当用户的请求中包含行业关键词、行业名称,并且意图是了解某个行业、生成行业研究报告、行业分析时,触发此 Skill。 典型触发场景包括但不限于:用户提到"XX行业研究"、"XX行业报告"、"帮我分析XX行业"、"XX产业深度研究"、"XX领域市场分析"等。 即使用户没有明确说"报告"二字,只要...

0· 108·0 current·0 all-time

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for gudai1972/pro-research-report.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "专业行业研究报告生成器" (gudai1972/pro-research-report) from ClawHub.
Skill page: https://clawhub.ai/gudai1972/pro-research-report
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install pro-research-report

ClawHub CLI

Package manager switcher

npx clawhub@latest install pro-research-report
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
Purpose & Capability
The name and description match the instructions: producing industry research reports with charts and DOCX/PDF outputs. However, the SKILL.md assumes the runtime has Python, matplotlib, python-docx, CJK fonts, and a DOCX→PDF converter available. The skill metadata declares no required binaries, packages, or install steps — that's an inconsistency (missing declared dependencies).
Instruction Scope
Instructions direct the agent to perform web research, save research artifacts to workspace paths, generate charts, and create DOCX/PDF files. That scope is appropriate for report generation. Two behavioral items to note: (1) the skill forces 'ONLY output is files (DOCX+PDF), never direct answers', which may be surprising or undesired in interactive contexts; (2) the spec requires web searches and full-URL citations but gives no guidance on which network endpoints are allowed or how to handle paywalled/proprietary sources. The workflow itself is explicit and not overly broad, but these operational gaps matter.
!
Install Mechanism
This is an instruction-only skill (no install spec), which is low-risk generally, but the instructions mandate use of specific Python libraries (matplotlib, python-docx), CJK font configuration, and DOCX→PDF conversion. Because no install or dependency declaration is provided, the skill may fail or attempt to run unsupported operations in environments lacking those components. Lack of an install mechanism is an operational/incoherence risk rather than direct malware risk.
!
Credentials
The skill requests no environment variables or credentials, which on the surface is good. However, the SKILL.md expects access to Tier 2 data providers (Bloomberg, Refinitiv, FactSet, etc.) for verification without specifying credentials or how to access paid APIs. That is a mismatch: the instructions assume access to external, sometimes-paid services but declare no credentials or guidance. Also, the agent will perform web searches and save potentially sensitive workspace files — users should be aware of what data will be written.
Persistence & Privilege
No elevated persistence or "always" inclusion is requested. The skill is user-invocable and allows autonomous invocation by default (normal). It does not request modifying other skills or system-wide settings.
What to consider before installing
This skill appears to do what it says (create in-depth industry reports with charts and DOCX/PDF), but it assumes runtime capabilities that are not declared. Before installing or enabling it: 1) Confirm the agent environment has Python, matplotlib, python-docx (or provide an install spec), required CJK fonts, and a reliable DOCX→PDF conversion tool. 2) Decide whether you want the agent to perform live web searches and save research files to the workspace (docs/ and data/); restrict workspace access if needed. 3) If you expect use of paid data providers (Bloomberg, FactSet, etc.), require explicit credential handling or remove those sources from the 'required' verification list. 4) Be aware the skill mandates not replying in chat and only producing files — if you need conversational answers, ask the author to relax that rule. 5) Ask the publisher to add a clear dependency/install section and to document which network endpoints and credentials (if any) the skill will use. If those gaps are not addressed, treat the skill cautiously and test it in a sandbox with non-sensitive data.

Like a lobster shell, security has layers — review code before you run it.

latestvk977txbdwz6x2v6z58p8wbbjss83zxye
108downloads
0stars
1versions
Updated 3w ago
v1.0.0
MIT-0

Industry Research Report Writer

Overview

This skill produces professional industry research reports by executing a strict 4-phase workflow: Research → Report Writing → Fact-Checking → Document Formatting. It delivers comprehensive, data-driven reports with integrated charts and visualizations, outputting final deliverables in Markdown, DOCX, and PDF formats.

You are a research report generation agent, NOT a Q&A chatbot. Your ONLY output is professionally formatted research reports (DOCX + PDF), never direct answers in conversation.

Workflow

The report creation follows a strict sequential process. ALL 4 steps are mandatory. NEVER skip any step.

Step 1: Research Phase

Conduct comprehensive industry research using trusted financial sources.

1.1 Current Date Awareness

  • Always include the current year in search queries for time-sensitive data
  • Specify date ranges when searching for recent news or developments
  • Use "latest" or current year keywords to ensure up-to-date results

1.2 Multilingual Search Strategy

For comprehensive research, search in BOTH Chinese and English:

Industry/Topic FocusPrimary LanguageSecondary Language
China market, Chinese companiesChinese (中文)English
Global/Western marketsEnglishChinese (for China angle)

Search Query Examples:

  • "广联航空 300900 行业研究 2026"
  • "EV battery market size 2026"
  • "半导体行业 发展趋势 2026"

1.3 Data Collection

Quantitative Data:

  • Market size and forecasts, Growth rates (CAGR), Market share by company/segment, Financial metrics

Qualitative Data:

  • Industry trends and drivers, Regulatory landscape, Competitive dynamics, Technology developments, Risk factors

1.4 Research Output Files

Save all research materials:

docs/
├── research_summary.md
├── market_data.md
├── industry_analysis.md
├── competitive_landscape.md
└── sources_list.md

data/
├── market_metrics.json
└── company_data.json

Step 2: Report Writing Phase (Synthesis + Chart Generation)

Synthesize ALL research materials from Step 1 into ONE comprehensive report.

2.1 Report Writing

Core Principles:

  • Synthesize ALL research documents into ONE comprehensive report
  • Use ONLY existing information — DO NOT fabricate facts
  • DO NOT conduct new research beyond provided materials

Writing Style:

  • Primary Style: Narrative, prose-based format
  • Data Integration: Embed statistics naturally within narrative
  • Tone: Professional, objective, authoritative third-person voice

2.2 Chart Generation

CJK Font Setup (MANDATORY before any chart generation):

plt.rcParams["font.sans-serif"] = ["SimHei", "Microsoft YaHei", "Noto Sans CJK SC"]
plt.rcParams["axes.unicode_minus"] = False

Chart Color Strategy:

THEME_COLORS = ["#1A1A1A", "#4A4A4A", "#B8860B", "#6B6B6B", "#9B9B9B"]

Key Principle: Generate charts using Python matplotlib and embed in the report.

Step 3: Fact-Checking Phase

Extract and verify key data, statistics, and factual claims from the Step 2 report.

  • Cross-Reference with Original Research
  • Independent Verification (For Critical Facts)
  • Distinguish between facts and projections

Step 4: Document Formatting Phase (DOCX + PDF)

Generate professionally formatted DOCX from the verified report, then convert to PDF.

4.1 Write Professional DOCX

Use python-docx to create a professionally formatted DOCX document.

FORBIDDEN:

  • Generating DOCX without charts (text-only document)
  • Converting to PDF before verifying charts are embedded in DOCX

Report Structure

Required Sections (All Report Types):

  1. Executive Summary
  2. Introduction
  3. Key Findings
  4. Conclusion
  5. Sources

Optional Sections:

  • Company Overview (for company-focused reports)
  • Market Size & Growth (for industry reports)
  • Competitive Landscape
  • SWOT Analysis
  • Risk Factors

Source Standards

Tier 1: Official & Regulatory Sources (Highest Trust)

  • Central Banks, Securities Regulators (SEC, CSRC), Government Statistics

Tier 2: Financial Data Providers

  • Bloomberg, Refinitiv, FactSet, S&P Global Market Intelligence

Tier 3: Research & Analysis

  • Investment Banks (Goldman Sachs, Morgan Stanley), Consulting Firms (McKinsey, BCG)

Tier 4: Industry & Trade Sources

  • Industry Associations, Company Filings, Earnings Calls

Tier 5: News & Media (Verify with Higher Tiers)

  • Financial Times, Wall Street Journal, Bloomberg News

Quality Standards

  • All statistics must be cited with sources (include FULL URLs)
  • Key findings require verification from at least 2 independent sources
  • Reports must include reliability ratings for all sources
  • Data should be current (within 12 months unless historical analysis)
  • Clear distinction between facts and analysis/projections
  • NEVER cite Wikipedia

Output

The final deliverable is a professionally formatted research report in both DOCX and PDF formats, saved to the workspace.

Common Mistakes to Avoid

  • Skipping the research phase and writing directly from user query
  • Outputting report content in conversation instead of files
  • Skipping fact-checking phase
  • Delivering only Markdown without DOCX/PDF
  • Fabricating or estimating data without clear labeling

Comments

Loading comments...