ℹ
Purpose & Capability
Name/description align with the code: there is a Node-based proposal generator that loads a local case/methodology DB and renders a template. However the SKILL.md/README list Python >=3.8 and RFP file parsing as capabilities — the code and package.json do not use Python, and there is no RFP parser implemented. This mismatch is unexplained and could lead to user confusion.
!
Instruction Scope
Runtime instructions tell users they can feed an RFP PDF and that '高级分析' uses Python, but the CLI forwards an --rfp option into config and the generator does not read or parse any RFP file or invoke Python. Also the generator expects a templates/proposal.md.hbs file but the package manifest does not include a templates directory or template file — so the tool will likely fail at render time.
✓
Install Mechanism
No remote download/install hooks are present in the manifest; installation is via normal npm install/npm link. package.json and package-lock.json list standard npm dependencies. There are no installer URLs, shorteners, or extract-from-URL steps that would raise high-risk flags.
✓
Credentials
The skill declares only 'node' as a required binary in metadata and requests no environment variables, credentials, or config paths. The code does not access external secrets or environment variables beyond reading local files, which is proportionate to its purpose.
✓
Persistence & Privilege
Skill is not always-enabled, is user-invocable, and does not request elevated persistence or modify other skills or system-wide settings. No autonomous always:true privilege issues are present.
What to consider before installing
This package appears to implement a Node CLI that generates proposal text from local data, but there are important inconsistencies you should resolve before trusting it: 1) The generator attempts to read a Handlebars template at templates/proposal.md.hbs, but no templates folder or template file is included — expect runtime failure unless you supply templates. 2) SKILL.md claims Python>=3.8 and RFP PDF-to-proposal conversion, but the code does not call Python or parse RFPs; don't expect those features to work. 3) It's safe from obvious exfiltration (no network calls or credential access), but because behavior is incomplete/mismatched, run it in a sandbox first. Recommended actions: inspect the repository for the missing templates or ask the author for the template and RFP parser, run npm install and a local test with simple inputs, and verify output before using real client data. If the author provides updated code/templates that remove the mismatches (template included and/or a documented RFP parser), confidence would increase.
