Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

智能报告生成器

智能报告生成器 - 自动分析数据并生成专业报告。支持多种报告类型(日报、周报、月报、分析报告),可输出到飞书文档或本地文件。

MIT-0 · Free to use, modify, and redistribute. No attribution required.
0 · 32 · 0 current installs · 0 all-time installs
MIT-0
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
!
Purpose & Capability
The description promises Feishu (飞书) integration, database queries, and automatic sending, but the skill declares no required environment variables, no config paths, and includes no code that would implement connectors. Requiring python3 while providing only templates and prose is disproportionate unless the platform supplies the actual connectors.
!
Instruction Scope
SKILL.md is high-level and instructs adding a TOOLS.md entry (Default Output: feishu_doc, Auto Send: true) but does not explain how to authenticate to Feishu, how database connections are supplied, or exactly which files/paths the agent should read. The vague, open-ended instructions could cause the agent to try available connectors or platform credentials without explicit guidance.
Install Mechanism
There is no install spec or code to install; the only declared requirement is python3 (binary). For an instruction-only skill with no scripts, requiring python3 is unexpected but not directly dangerous — it is an incoherence that should be justified by the author.
!
Credentials
The skill claims features that normally require secrets (Feishu API token, DB credentials, possibly file access) but declares no required env vars or config paths. That mismatch either omits necessary credential requirements or relies on implicit platform-level credentials — both situations are risky without clarification.
Persistence & Privilege
always is false and the skill does not request persistent or elevated privileges. Autonomous invocation is allowed (default) which is normal; there is no evidence the skill modifies other skills or global agent settings.
What to consider before installing
This skill appears to be a high-level template for report generation but omits how it will access data or authenticate to Feishu/DBs. Before installing: 1) Ask the author how Feishu and database credentials are supplied and where they will be stored; 2) Confirm whether the platform provides connectors or if you must provide API keys/DB strings; 3) Disable or review any 'Auto Send' setting (Feishu) until credentials and destinations are verified; 4) If you must provide credentials, scope them minimally (e.g., a Feishu bot limited to a single doc) and avoid giving broad platform-level secrets; 5) Test in a sandbox or with throwaway data first; 6) Request a code implementation or clearer runtime instructions (how python3 is used) so you can review actual network calls and file access.

Like a lobster shell, security has layers — review code before you run it.

Current versionv1.0.0
Download zip
latestvk977w0smmxeey9djqrg7ky0a9583127w

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

Runtime requirements

Binspython3

SKILL.md

智能报告生成器 (Smart Reporter)

自动分析数据源并生成专业格式的报告,支持多种输出格式和渠道。

功能特性

1. 多数据源支持

  • 飞书多维表格
  • CSV/Excel 文件
  • JSON 数据
  • 数据库查询结果

2. 报告类型

  • 日报: 工作进度、任务完成情况
  • 周报: 周期性总结、趋势分析
  • 月报: 业绩回顾、KPI分析
  • 分析报告: 深度数据分析、洞察发现

3. 智能分析

  • 自动识别数据趋势
  • 异常值检测
  • 关键指标提取
  • 对比分析

4. 输出渠道

  • 飞书文档
  • Markdown 文件
  • HTML 页面
  • PDF 文档

使用方法

生成报告:
1. 指定数据源(飞书表格/文件)
2. 选择报告类型
3. 设置时间范围
4. 自动生成并输出

报告模板

位于 templates/ 目录,可自定义:

  • daily.md - 日报模板
  • weekly.md - 周报模板
  • monthly.md - 月报模板
  • analysis.md - 分析报告模板

示例场景

  • 每日自动生成销售日报
  • 每周汇总团队工作进度
  • 每月分析业务数据趋势
  • 按需生成专项分析报告

配置

TOOLS.md 中添加:

### Smart Reporter
- Default Output: feishu_doc
- Report Timezone: Asia/Shanghai
- Auto Send: true

版本: 1.0.0 作者: @lijie 分类: 数据分析 / 报告生成

Files

4 total
Select a file
Select a file to preview.

Comments

Loading comments…