retail-trade-report-generator
v1.0.0Generates a consolidated weekly retail trade report by processing 12 Excel sales files, mapping stores to regions, calculating ADA metrics, WoW comparisons,...
⭐ 1· 1.6k·2 current·2 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
The SKILL.md, README, and the included Python script all align: they expect 12 Excel files plus a store_mapping.csv and produce a consolidated Excel report. One minor mismatch: the package metadata declares no required binaries or env vars, but the provided code requires a Python runtime with pandas and openpyxl; those dependencies are not declared in the skill metadata or install spec.
Instruction Scope
Runtime instructions and the code limit actions to reading local Excel files and a CSV, aggregating numbers, and writing an Excel output. There are no instructions to read unrelated system files, environment variables, or to send data to external endpoints.
Install Mechanism
There is no install spec (instruction-only), which minimizes install-time risk. However, the shipped Python script requires third-party libraries (pandas, openpyxl) that are not declared; the skill does not provide an install step or pinned package list. This is an operational omission rather than a security red flag, but you should ensure dependencies are installed from trusted sources before running.
Credentials
The skill requests no environment variables, no credentials, and no config paths. Required inputs are explicit (local Excel files and a mapping CSV) and proportional to the stated purpose.
Persistence & Privilege
The skill is not forced always-on and does not request persistent platform privileges. It does not modify other skills or system-wide settings in the provided code.
Assessment
This package looks coherent and not malicious, but take these practical steps before running it: 1) Review the Python code yourself (or have a developer do so) to confirm the column/row indices and sheet names match your real Excel exports — the script uses hard-coded row ranges and sheet names which may need adjustment. 2) Run it in a controlled environment (local VM or container) and install dependencies from official sources (pip install pandas openpyxl). 3) Provide only the intended input files and the store_mapping.csv; the skill reads only files in the specified input directory and writes an output Excel. 4) Test with sample data to verify results and edge-case handling (e.g., missing sheets, date parsing). If you need the skill to run autonomously on a platform, ensure the runtime includes the required Python packages or add an install step that pins trusted package versions.Like a lobster shell, security has layers — review code before you run it.
latestvk9756gsk15v99jsdejmy0fws3h80c0yx
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
