Fund Weekly Report
PassAudited by ClawScan on May 1, 2026.
Overview
This skill appears benign: it is designed to read user-provided Excel files and generate a Word fund report, with only routine file-handling and package-install considerations.
This looks appropriate for generating fund weekly reports from Excel data. Before installing, confirm you trust the publisher, install Python dependencies from trusted sources, and only provide Excel files you intend the skill to analyze.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The skill will process the contents of Excel files you provide and create a local Word document.
The skill reads Excel input and writes a Word report, including from local paths. This is expected for its report-generation purpose and is bounded to user-provided files.
读取用户明确提供的Excel文件（聊天上传或本地路径） ... 将生成的周报写入用户工作目录
Only provide the intended Excel files, check the output location, and avoid giving paths to unrelated sensitive documents.
Installing dependencies can add third-party code to the local environment.
The skill instructs a manual installation of common Python packages used for Excel and Word processing. This is purpose-aligned, but package installation is still a supply-chain touchpoint.
pip install pandas python-docx openpyxl
Install dependencies from trusted package indexes and use a virtual environment if possible.