📦 Estimate Builder — 造价估算
v1.0.0一键生成符合GB/T 50500-2024标准的建设工程造价分解表，涵盖人工、材料、机械、分包及其他费用，支持多项目对比与实时调价。
0· 61·0 当前·0 累计
by @ruiyongwang下载技能包
最后更新
2026/4/5
安全扫描
OpenClaw
可疑
medium confidenceNULL
评估建议
Do not install yet. Ask the publisher to explain/resolve these points before proceeding: (1) Confirm the publisher/owner identity (ownerId mismatch between registry and _meta.json/claw.json). (2) Explain why 'filesystem' permission is declared and what files (if any) the skill will read or write; refuse or restrict filesystem access unless explicitly required. (3) Clarify runtime requirements: the skill lists python3 but references pandas in code—confirm whether the skill will execute code local...详细分析 ▾
⚠ 用途与能力
The skill claims to be an instruction-only estimator for GB/T 50500-2024 and includes Python sample code, which explains the python3 requirement. However, the package metadata (claw.json and _meta.json) shows different owner IDs and version numbers than the registry metadata, and claw.json declares a 'filesystem' permission even though there are no code files that would clearly need broad filesystem access. These inconsistencies suggest the declared capabilities/permissions are not fully aligned with the stated purpose.
ℹ 指令范围
The SKILL.md and instructions.md focus on building and validating estimates and include code snippets using pandas and DataFrame import/export methods. The runtime instructions themselves do not explicitly instruct reading arbitrary system files or exfiltrating data, but the DataFrame import/export examples imply file or data handling. There are inconsistent default rates between instructions.md (15% overhead / 10% profit / 5% contingency) and SKILL.md code (管理费 10%, 利润 7%, 规费 5%, 税金 9%), which is a functional inconsistency that could confuse users or agents following the skill.
✓ 安装机制
This is instruction-only with no install spec and no downloaded artifacts, which is lower risk. The skill declares python3 as a required binary (consistent with included Python examples) but does not require or declare pandas or other Python packages that the examples reference.
✓ 凭证需求
The skill does not request environment variables, credentials, or config paths. That is proportionate for an estimation assistant that doesn't integrate with external services.
⚠ 持久化与权限
always:false and user-invocable:true (normal). However, claw.json includes a 'filesystem' permission which would permit reading/writing files if enforced by the platform; the registry metadata and SKILL.md do not justify or explain why general filesystem access is needed. Also ownerId/version mismatches across files raise supply-chain provenance concerns about who controls the skill and whether it was tampered with.
安全有层次，运行前请审查代码。
运行时依赖
🖥️ OSmacOS · Linux · Windows
版本
latestv1.0.02026/4/5
NULL
● 无害
安装命令
点击复制官方npx clawhub@latest install cn-estimate-builder
镜像加速npx clawhub@latest install cn-estimate-builder --registry https://cn.longxiaskill.com