by 安全扫描
OpenClaw
可疑
high confidenceNULL
评估建议
This skill overpromises features it doesn't implement and omits the 'xlsx' dependency. Before installing: (1) don't assume it can create charts, export PDFs, or run AI analysis—ask the author or request source that implements those features; (2) expect it to read any local file path you give it, so don't open sensitive files with it unless you trust the code; (3) the missing dependency will likely cause runtime errors—ask for an updated package.json or a trustworthy package source (e.g., GitHub)...详细分析 ▾
⚠ 用途与能力
The name and description promise charting, PDF export, and AI-based analysis. The included index.js only implements opening, reading, basic filtering, simple statistics, and a trivial row/column 'analysis'—no chart generation, no PDF export, no AI integration. package.json also does not declare the required 'xlsx' dependency used by the code. The required capabilities are therefore overpromised and inconsistent with the actual code.
⚠ 指令范围
SKILL.md instructs the agent to perform charts, PDF export, and AI analysis. The runtime code does not implement those actions. The code does read arbitrary file paths provided by the user (XLSX.readFile), which is expected for an Excel tool but means it will access local files if given paths—this is within scope but should be explicit to users. Overall the instructions grant capabilities the code doesn't have.
ℹ 安装机制
No install spec is provided (lower risk). However, index.js requires the 'xlsx' package but package.json lists no dependencies; that discrepancy will likely cause runtime failures or hidden implicit install behavior. There are no downloads or external install URLs present.
✓ 凭证需求
The skill requests no environment variables, no credentials, and no special config paths. That is proportionate for a local Excel-processing skill.
✓ 持久化与权限
The skill is not marked always:true and uses normal invocation. It does not modify other skills or system config. Autonomous invocation is allowed (platform default) but not combined with other concerning privileges.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.12026/4/3
NULL
● Pending
安装命令
点击复制官方npx clawhub@latest install excel-master
镜像加速npx clawhub@latest install excel-master --registry https://cn.longxiaskill.com