Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

MiniMax Office Pack

v1.0.0

MiniMax Office办公技能包 - Word/Excel/PDF/PPT四大专业文档生成。基于.NET OpenXML SDK、底层XML直操作、Playwright+ReportLab双引擎。一键生成可直接交付的专业办公文档。

0· 130·0 current·0 all-time
bySMS@smseow001

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for smseow001/minimax-office-pack.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "MiniMax Office Pack" (smseow001/minimax-office-pack) from ClawHub.
Skill page: https://clawhub.ai/smseow001/minimax-office-pack
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install minimax-office-pack

ClawHub CLI

Package manager switcher

npx clawhub@latest install minimax-office-pack
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
!
Purpose & Capability
The README claims use of .NET OpenXML SDK, low-level XML manipulation, Playwright (browser) and ReportLab (Python) and support for macros/.xlsm — these are complex, cross-stack capabilities. However the skill declares no required binaries, no env vars, and no install steps. That mismatch (heavy dependencies vs zero requirements) is incoherent: a document-generation skill would legitimately need some runtime dependencies, at minimum declarations about which binaries or runtimes are required.
!
Instruction Scope
SKILL.md is high-level marketing and trigger phrases only; it does not contain concrete runtime instructions, commands to run, or explicit file/path access rules. The lack of concrete scope is problematic: the agent would need to decide how to obtain/install/execute the claimed engines, which grants broad discretion and increases risk. The instructions do not explicitly ask to read unrelated files or secrets, but their vagueness is itself a red flag.
!
Install Mechanism
No install specification is provided despite claiming use of multiple toolchains (dotnet, Playwright with browser drivers, Python ReportLab, possibly VBA macros). Absence of an install mechanism for these components is inconsistent and makes it unclear how the skill would run — this could hide unannounced installation steps or require the agent to fetch arbitrary artifacts at runtime.
Credentials
The skill requests no environment variables or credentials, which superficially seems conservative. However, given the claimed ability to produce .xlsm (macros) and to drive browsers (Playwright), legitimate operation would likely need filesystem and network access and possibly runtime configuration. The absence of declared resource needs (binaries, paths) is notable and unexplained.
Persistence & Privilege
The skill is not marked 'always:true' and uses default autonomous invocation settings. That is normal. There is no request to modify other skills or system-wide configs in the SKILL.md.
What to consider before installing
This skill's description promises a sophisticated, multi-language document generator but provides no code, no install steps, and no declared runtime requirements — that mismatch is suspicious. Before installing or enabling it, ask the publisher for: (1) the source code or a trusted homepage/repository; (2) an explicit install spec listing required runtimes/binaries (dotnet, Python, Playwright/browser drivers) and any packages; (3) what file-system, network, or macro execution privileges the skill needs; (4) whether it will download or execute third-party artifacts and from which URLs; and (5) whether generated Excel macros contain VBA and how they are sanitized. If you must test it, do so in an isolated environment (air-gapped VM) and avoid giving it access to secrets or production data. If the publisher cannot supply concrete runtime details and a verifiable source, do not enable this skill.

Like a lobster shell, security has layers — review code before you run it.

automationvk972bdm8reh34whbjn9f0nrm0s852t4mdocumentvk972bdm8reh34whbjn9f0nrm0s852t4mexcelvk972bdm8reh34whbjn9f0nrm0s852t4mlatestvk972bdm8reh34whbjn9f0nrm0s852t4mminimaxvk972bdm8reh34whbjn9f0nrm0s852t4mofficevk972bdm8reh34whbjn9f0nrm0s852t4mpdfvk972bdm8reh34whbjn9f0nrm0s852t4mpptvk972bdm8reh34whbjn9f0nrm0s852t4mwordvk972bdm8reh34whbjn9f0nrm0s852t4m
130downloads
0stars
1versions
Updated 1w ago
v1.0.0
MIT-0

MiniMax Office Skills Pack

MiniMax专业办公文档技能包

来源: MiniMax-AI/skills
Star: 5000+ ⭐
解决痛点: AI生成文档格式乱、公式丢失、无法交付


四大技能

技能触发词核心定位
📄 MiniMax-Word生成专业Word文档.NET OpenXML SDK,完整格式保留
📊 MiniMax-Excel生成专业Excel表格底层XML直操作,公式宏保留
📑 MiniMax-PDF生成专业PDF文档Playwright+ReportLab双引擎
📽️ MiniMax-PPT生成专业PPT内置模板,自动排版

1️⃣ MiniMax-Word 专业文档

触发词: 生成专业Word文档 / 用MiniMax Word生成

核心优势:

  • ✅ 基于微软官方 .NET OpenXML SDK
  • ✅ 完整保留页眉、页脚、目录、修订痕迹
  • ✅ 复杂表格、多级标题、样式不丢失
  • ✅ 输出 .docx,直接交付

输出标准:

  • 无乱码
  • 格式不错位
  • 可直接用于正式提交

2️⃣ MiniMax-Excel 数据表格

触发词: 生成专业Excel表格 / 用MiniMax Excel生成

核心优势:

  • ✅ 底层XML直操作,非轻量Python库
  • ✅ 完整保留公式、宏、数据透视表
  • ✅ 支持数据验证、条件格式
  • ✅ 输出 .xlsx/.xlsm

适用场景:

  • 财务报表
  • 数据汇总
  • 分析表
  • 金融级表格

3️⃣ MiniMax-PDF 高质量排版

触发词: 生成专业PDF文档 / 用MiniMax PDF生成

核心优势:

  • ✅ Playwright + ReportLab 双引擎
  • ✅ 封面HTML/CSS渲染
  • ✅ 正文精准排版
  • ✅ 保留书签、页码、表单填充

输出标准:

  • 无错位
  • 无乱码
  • 可直接打印交付

4️⃣ MiniMax-PPT 演示文稿

触发词: 生成专业PPT / 用MiniMax PPT生成

核心优势:

  • ✅ 内置4套视觉风格模板
  • ✅ 自动对齐圆角、阴影、间距
  • ✅ 按大纲生成封面、目录、内容页
  • ✅ 输出 .pptx,排版整齐

组合使用

完整办公流程:

Word文档 → Excel数据表 → PDF报告 → PPT演示

MiniMax Office Skills | 直接交付的专业文档

Comments

Loading comments...