by 安全扫描
OpenClaw
安全
high confidence该技能的要求、指令和代码与单人创始人现金流预测工具一致，不请求无关的凭证或外部网络访问。
评估建议
该技能看似连贯、自包含：仅使用Python标准库，在指定现金流目录读写快照文件，可能从本地invoices/INDEX.json导入发票（与opc-invoice-manager集成）。运行前：如果希望检查逻辑，请审查脚本（scripts/cashflow_tracker.py）；确保指向的现金流和发票目录不含敏感无关数据；仅对预期共享的发票数据运行导入。如果允许自主代理调用，请注意代理可以运行脚本对提供的本地路径进行操作——这是正常的，但在敏感环境中值得考虑。...详细分析 ▾
✓ 用途与能力
Name/description, SKILL.md, README, templates, and the Python script all implement cash‑flow forecasting, runway calculation, alerts, and optional invoice import — capabilities align with the stated purpose. The opc-invoice-manager integration (importing invoices from a local invoices/INDEX.json) is reasonable for AR import.
✓ 指令范围
Runtime instructions limit operations to reading and writing snapshot and template files, asking the user for inputs, and optionally importing local invoice files. There are no instructions to read unrelated system files, environment variables, or send data to external endpoints.
ℹ 安装机制
There is no install spec (instruction-only), but the skill includes a Python script (stdlib only) that the agent can run. This is expected for a local CLI-style skill; no network downloads or third‑party package installs are specified.
✓ 凭证需求
The skill declares no required environment variables, no credentials, and no config paths beyond the local cashflow directory. Requested data (snapshots, invoices) is proportionate to its functionality.
✓ 持久化与权限
always is false and the skill does not request permanent platform privileges. It reads/writes its own snapshot files under the provided cashflow directory and does not modify other skills or global agent configuration.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/3/17
初始发布
● 无害
安装命令 点击复制
官方npx clawhub@latest install opc-cashflow-manager
镜像加速npx clawhub@latest install opc-cashflow-manager --registry https://cn.clawhub-mirror.com
技能文档
简介
单人创始人现金流决策系统，提供概率加权预测、跑道计算、烧钱率分析和生存警报。集成其他OPC工具，帮助创始人优化财务管理。使用指南
- 安装：...
- 配置：...
- 运行：...
代码示例
# 示例代码
注意：本内容假设为示例，实际内容应根据原始SKILL.md文档翻译而来，由于原始文档未提供，以上为模拟。
数据来源：ClawHub ↗ · 中文优化：龙虾技能库
OpenClaw 技能定制 / 插件定制 / 私有工作流定制
免费技能或插件可能存在安全风险，如需更匹配、更安全的方案，建议联系付费定制