Ai Intelligent Report Generator

自动化报告生成，数据分析 + 模板填充。

Security Scan

The skill's description is plausible, but the SKILL.md tells the agent to clone and run external code (git clone / pip install / python app.py) while the registry metadata claims no install or required binaries/credentials — that mismatch and the lack of declared credentials for email/scheduling are concerning.

Purpose & Capability

The skill claims report generation, analysis, templates, and email scheduling. The registry metadata lists no required binaries, env vars, or install steps, yet SKILL.md's '安装' section instructs cloning a GitHub repo and running python (implying git, python, and pip are required). This is an internal inconsistency: either the skill should declare those requirements or it should not instruct fetching/running external code.

Instruction Scope

The runtime instructions explicitly instruct cloning https://github.com/openclaw-skills/ai-intelligent-report-generator and running pip install -r requirements.txt and python app.py. That means following the skill's instructions will fetch and execute arbitrary remote code at runtime. The SKILL.md also references email integration and scheduling but does not specify what credentials or endpoints will be used or where secrets are stored, leaving scope and data flows vague.

Install Mechanism

The install method in SKILL.md is a git clone from GitHub.com (a well-known host) followed by pip install. Using GitHub releases is common, but this repo is not included in the declared install spec or packaged with the skill. Because the skill is instruction-only but tells the agent to fetch and run external code, there is an elevated risk: the code will run with whatever privileges the agent uses and should be reviewed first.

Credentials

The skill mentions email integration and possibly scheduling and storage, but requires.env is empty and no primary credential is declared. Practical deployment would typically need SMTP credentials, API keys, or cloud/storage credentials — their absence from the metadata is a mismatch and means secrets handling is unspecified.

Persistence & Privilege

always is false and the skill does not request persistent presence or special system-wide privileges in the registry metadata. There's no explicit instruction to modify other skills or system configs in SKILL.md.

What to consider before installing

Do not run the listed git/pip/python commands unless you inspect the repository first. Ask the author for either: (a) the skill packaged with its code and an explicit install spec, or (b) the exact repo URL and a reproducible security review (review requirements.txt and app.py). Verify how email credentials are supplied and stored (avoid putting secrets in plain files), run the code in a sandbox or non-privileged environment, and confirm the GitHub repo owner and commit history before installing. If you need this functionality but cannot review the code, prefer a skill that declares its install steps and required env vars in the registry metadata or comes packaged rather than instructing arbitrary remote code execution.

AI 智能报告生成系统

描述

自动化报告生成，数据分析 + 模板填充。

功能

• 数据分析（自动分析）
• 模板管理（模板库）
• 报告生成（自动填充）
• 定时发送（自动发送）
• 版本管理（版本控制）

定价

• 基础版：¥99/月（50 报告/月）
• 专业版：¥499/月（500 报告/月）
• 企业版：¥1999/月（无限报告）

适用场景

• 周报/月报
• 分析报告
• 财务报告
• 项目报告

技术栈

• Python + FastAPI
• 数据分析
• 模板引擎
• 邮件集成

安装

git clone https://github.com/openclaw-skills/ai-intelligent-report-generator
cd ai-intelligent-report-generator
pip install -r requirements.txt
python app.py

---

创建：2026-03-13 作者：OpenClaw Skills Team