📦 Office Productivity — 办公自动化
v1.0.0一站式办公自动化技能套件，支持 Word/Excel/PPT/PDF 文档处理、邮件管理、日程规划、报表生成、会议纪要等场景，一句话指令即可完成创建、编辑、批量处理与数据汇总，全面提升办公效率。
0· 345·0 当前·0 累计
by 下载技能包
最后更新
2026/3/28
安全扫描
OpenClaw
可疑
medium confidenceNULL
评估建议
This package includes benign-looking local scripts for Word/Excel/PDF but advertises additional features (PPT generation, email and calendar integration) while those scripts and resources are missing. Before installing or using it: 1) Ask the publisher for the missing files (create_pptx.py, mail_client.py) and the references/ templates referenced in SKILL.md; inspect those files for network endpoints, credential handling, and data transmission logic. 2) Do not provide IMAP/SMTP or Google credent...详细分析 ▾
⚠ 用途与能力
The SKILL.md advertises Word/Excel/PPT/PDF, IMAP/SMTP mail and Google Calendar integration and lists scripts like create_pptx.py and mail_client.py, but the bundle only contains create_docx.py, create_xlsx.py and pdf_tools.py. Mail/calendar/PPT features are advertised but the necessary code and declared credentials are missing — these capabilities would normally require additional files, API credentials, or environment configuration.
⚠ 指令范围
Runtime instructions refer to calling mail and calendar functionality (IMAP/SMTP and Google Calendar API) and templates/resources under references/, but there is no mail_client.py or references directory in the package. The SKILL.md also gives open-ended directions to 'call scripts, pass parameters, send files directly' without specifying where credentials come from or how external APIs are authenticated, leaving broad agent discretion and scope creep.
✓ 安装机制
No install spec is provided (instruction-only with a few local scripts). This minimizes supply-chain risk from arbitrary downloads. The included Python scripts are local and simple; nothing in the install mechanism fetches external code.
⚠ 凭证需求
The metadata declares no required environment variables or primary credential, yet SKILL.md explicitly says email/calendar operations require IMAP/SMTP configuration and Google Calendar API access. This mismatch means the skill will need sensitive credentials at runtime but does not declare or justify them in its manifest.
✓ 持久化与权限
The skill is not set to always:true and does not request persistent system-wide modifications. Autonomous invocation is permitted by default (disable-model-invocation:false) but that is platform normal and is not, by itself, a red flag here.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/3/28
NULL
● 无害
安装命令
点击复制官方npx clawhub@latest install office-productivity
镜像加速npx clawhub@latest install office-productivity --registry https://cn.longxiaskill.com