📦 Excel Generator — 生成Excel报表
v1.0.0用自然语言描述即可一键生成专业级 Bloomberg 风格 Excel 工作簿，自动创建多表页、仪表板、KPI 卡片与图表，让数据报告秒级完成。
0· 118·0 当前·0 累计
by 下载技能包
最后更新
2026/3/31
安全扫描
OpenClaw
可疑
high confidenceNULL
评估建议
This skill looks like it will produce Excel workbooks, but there are several red flags you should resolve before installing or running it:
- Ask the publisher to provide the python generator script (scripts/excel_generator.py) or include clear install steps. Right now the SKILL.md tells the agent to run a script that is not part of the skill.
- Confirm runtime requirements: python3 and the openpyxl library are required but not declared. Ensure those are available in a safe environment.
- Do not...详细分析 ▾
ℹ 用途与能力
The skill's name and description align with generating Excel workbooks using Python/openpyxl. However, the SKILL.md assumes availability of python3 and openpyxl and a local generator script (scripts/excel_generator.py) even though the skill declares no required binaries, dependencies, or code files. The missing dependency/instruction mapping is inconsistent.
⚠ 指令范围
Instructions tell the agent to cd into and write files under a specific user path (/Users/synapsefirm/.openclaw/workspace), run a local script (scripts/excel_generator.py), and save outputs to /Users/synapsefirm/.openclaw/workspace/excel-projects/. The skill also prescribes a default password (Formly2026!) for password-protected deliverables. These actions involve writing/reading local filesystem locations and rely on a script that is not included — scope and assumptions are unclear and potentially unsafe.
ℹ 安装机制
This is an instruction-only skill with no install spec, which is low risk in general. But it assumes external runtime capabilities (python3, openpyxl) and a local script; the absence of declared dependencies or an included generator script is an incoherence to address before use.
⚠ 凭证需求
The skill requests no environment variables but hardcodes a filesystem path containing a specific username (synapsefirm) and embeds a default password (Formly2026!). Both are disproportionate: the hardcoded path suggests the skill was written for a particular environment, and the embedded password is a sensitive default that could lead to insecure sharing if used as-is.
✓ 持久化与权限
The skill does not request permanent presence (always: false) and does not declare modifications to other skills or system-wide settings. Autonomy is allowed by default but not by itself a concern here.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/3/31
NULL
● 可疑
安装命令
点击复制官方npx clawhub@latest install excel-generator
镜像加速npx clawhub@latest install excel-generator --registry https://cn.longxiaskill.com