📦 DELLIGHT CRO Revenue Operations — DELLIGHT CRO 收益运营 — 自动化收益运营工具
v1.0.0自动化工具，用于DELLIGHT CRO的收益运营，涵盖收入策略、管道管理、定价决策、交易资格、ROI分析等，旨在为首席收入官提供决策支持。
0· 666·0 当前·0 累计
by 安全扫描
OpenClaw
可疑
medium confidence技能描述、文档和包含的ROI脚本与CRO收益运营目的相符，但运行指令引用了缺失的脚本，这可能指示包装不完整或懒惰（或脚本将在运行时获取）。
评估建议
该包看起来像一个合法的CRO运营辅助工具：包含的roi_calculator.py简单、安全，可本地运行。然而，SKILL.md指示运行两个未包含的脚本（scripts/pipeline_tracker.py和scripts/revenue_forecast.py），这是主要的红旗。安装或启用前：1）向发布者请求缺失脚本；2）检查缺失脚本的网络调用、凭据访问或模糊逻辑；3）如果必须立即测试，在隔离环境中运行roi_calculator.py；4）如果启用自主调用，谨慎：缺失或远程获取的组件可能会在运行时改变技能行为。如果发布者无法证明或提供缺失文件，请将技能视为不完整，避免在生产中使用。...详细分析 ▾
ℹ 用途与能力
Name, description, SKILL.md content, and the provided roi_calculator.py align with a CRO/revenue-ops automation skill. The skill does not request unrelated credentials or binaries. However, SKILL.md instructs running scripts/pipeline_tracker.py and scripts/revenue_forecast.py which are not present in the file manifest — this is an unexplained gap.
⚠ 指令范围
SKILL.md stays within CRO/revenue scope (pipeline, pricing, ROI). It does not instruct the agent to read system files, environment variables, or post to unknown endpoints. The concerning part is the explicit instructions to run two scripts that are not included (pipeline_tracker.py and revenue_forecast.py). If the agent or integrator attempted to fetch or execute those absent scripts at runtime, that could expand the attack surface; as-is the missing files are an operational/integrity issue.
✓ 安装机制
No install spec (instruction-only plus a small included script). That limits disk-writing/remote-code risks. The single included Python script is local, small, and contains no network or exec calls.
✓ 凭证需求
The skill requests no environment variables, credentials, or config paths. This is proportionate to the described functionality and to the included roi_calculator.py.
✓ 持久化与权限
always is false and disable-model-invocation is false (normal). The skill does not ask for permanent presence or to modify other skills. No additional privilege requests are present.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/2/14
初始发布 — 收入策略、管道管理、定价、交易资格
● 无害
安装命令
点击复制官方npx clawhub@latest install dellight-cro-revenue-ops
镜像加速npx clawhub@latest install dellight-cro-revenue-ops --registry https://cn.longxiaskill.com