Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Office Productivity

办公自动化技能套件,涵盖文档处理(Word/Excel/PPT/PDF)、邮件管理、日程规划、报表生成、会议纪要等办公场景。触发场景:创建文档、编辑表格、制作PPT、处理邮件、生成报表、日程管理、整理会议记录、批量文件处理等任何办公效率提升需求。

MIT-0 · Free to use, modify, and redistribute. No attribution required.
0 · 70 · 0 current installs · 0 all-time installs
MIT-0
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Suspicious
medium confidence
!
Purpose & Capability
The SKILL.md advertises Word/Excel/PPT/PDF, IMAP/SMTP mail and Google Calendar integration and lists scripts like create_pptx.py and mail_client.py, but the bundle only contains create_docx.py, create_xlsx.py and pdf_tools.py. Mail/calendar/PPT features are advertised but the necessary code and declared credentials are missing — these capabilities would normally require additional files, API credentials, or environment configuration.
!
Instruction Scope
Runtime instructions refer to calling mail and calendar functionality (IMAP/SMTP and Google Calendar API) and templates/resources under references/, but there is no mail_client.py or references directory in the package. The SKILL.md also gives open-ended directions to 'call scripts, pass parameters, send files directly' without specifying where credentials come from or how external APIs are authenticated, leaving broad agent discretion and scope creep.
Install Mechanism
No install spec is provided (instruction-only with a few local scripts). This minimizes supply-chain risk from arbitrary downloads. The included Python scripts are local and simple; nothing in the install mechanism fetches external code.
!
Credentials
The metadata declares no required environment variables or primary credential, yet SKILL.md explicitly says email/calendar operations require IMAP/SMTP configuration and Google Calendar API access. This mismatch means the skill will need sensitive credentials at runtime but does not declare or justify them in its manifest.
Persistence & Privilege
The skill is not set to always:true and does not request persistent system-wide modifications. Autonomous invocation is permitted by default (disable-model-invocation:false) but that is platform normal and is not, by itself, a red flag here.
What to consider before installing
This package includes benign-looking local scripts for Word/Excel/PDF but advertises additional features (PPT generation, email and calendar integration) while those scripts and resources are missing. Before installing or using it: 1) Ask the publisher for the missing files (create_pptx.py, mail_client.py) and the references/ templates referenced in SKILL.md; inspect those files for network endpoints, credential handling, and data transmission logic. 2) Do not provide IMAP/SMTP or Google credentials until you have reviewed the mail/calendar code; prefer creating a limited-scope test account. 3) Run the included scripts in an isolated/test environment first and review any logs or outbound network activity. 4) Prefer skills with a known source/homepage or that explicitly declare required secrets in the manifest. If the author cannot provide the missing components and an explanation for why credentials are not declared, consider rejecting the skill.

Like a lobster shell, security has layers — review code before you run it.

Current versionv1.0.0
Download zip
latestvk9738d884ya1eah1przqc23zbh83rm63

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

SKILL.md

Office Productivity - 办公自动化

核心能力

文档处理

  • Word (.docx):创建、编辑、格式化;支持模板填充、批注处理、页眉页脚
  • Excel (.xlsx):数据整理、公式计算、图表生成、批量数据处理
  • PPT (.pptx):幻灯片创建、模板应用、批量排版
  • PDF:合并、拆分、提取文字/图片、加水印、签名

邮件 & 日历

  • 邮件读取 / 发送(IMAP/SMTP)
  • 邮件批量处理(分类、归档、回复)
  • 日程读取与事件创建( ICS / Google Calendar API)

报告 & 文档生成

  • 根据模板自动填充数据生成报告
  • 多文件汇总(会议记录、项目文档合并)
  • 格式化输出(Markdown → Word/PDF)

关键脚本

  • scripts/create_docx.py - Python-docx 创建 Word 文档
  • scripts/create_xlsx.py - openpyxl 创建 Excel(含图表)
  • scripts/create_pptx.py - python-pptx 创建 PPT
  • scripts/pdf_tools.py - PDF 处理(合并/拆分/提取)
  • scripts/mail_client.py - IMAP/SMTP 邮件收发

参考资源

  • references/office-templates/ - 常用办公模板
  • references/api-docs.md - 邮件/日历 API 说明

工作流程

  1. 明确需求:用户需要处理什么办公任务?
  2. 选择工具:根据文件类型和任务性质选择对应脚本
  3. 执行生成:调用对应脚本,传入参数
  4. 输出交付:文件路径或直接发送

注意事项

  • Office 文件优先使用 python-docx / openpyxl / python-pptx 库
  • PDF 处理推荐 PyPDF2 / pdfplumber
  • 邮件操作需要用户提供 IMAP/SMTP 配置
  • 批量处理先在小样本上测试再全量执行

Files

4 total
Select a file
Select a file to preview.

Comments

Loading comments…