团队周报汇总技能。收集组员周报图片,按「部门管理」和「项目管理」两大维度分类汇总,对比本周完成情况与上周计划,生成纯文本团队周报。当用户说"汇总周报"、"整理周报"、"生成周报"、"这是周报"(配图)、"项目进度汇总"时触发。支持分批收集、持久化存储、纵向对比。
Security Analysis
high confidenceThe skill's requests and behavior (OCR images, local JSON storage, text-generation of weekly reports) are consistent with its stated purpose and do not ask for extra credentials or external installs.
Name/description match the instructions: the skill collects weekly-report images, runs OCR, groups items by department/project, compares with last week, and writes a plain-text report. It requires no external credentials or unrelated binaries and stores data under a local memory path, which is proportional to the stated purpose.
SKILL.md limits operations to processing user-supplied images via the platform 'image' tool, extracting specified report fields, appending/reading JSON files under memory/weekly-reports, and generating text output. It does not instruct reading unrelated system files, accessing environment variables, or sending data to external endpoints. Note: it persistently stores potentially sensitive PII (names, tasks, hours) locally — this is expected for the feature but is a privacy consideration.
Instruction-only skill with no install spec and no code files; nothing is downloaded or written beyond the defined memory files. This is the lowest-risk install posture.
The skill declares no environment variables, credentials, or config paths. The actions described (OCR of user images and local JSON storage) do not require secrets. There is no request for unrelated credentials.
The skill persists weekly data under memory/weekly-reports and reads prior-week files for comparison. It does not request always:true or modify other skills. Persistence is expected for this use-case, but users should be aware that the stored JSONs may contain personal or sensitive information and consider retention/cleanup policies.
Guidance
This skill appears to do what it says: it OCRs images you provide, stores extracted report entries under memory/weekly-reports as JSON, and generates a plain-text weekly summary with a focused compare-to-last-week section. It asks for no credentials and has no install steps. Before enabling: 1) confirm you are comfortable with report data (names, tasks, hours) being stored persistently at memory/weekly-reports and decide on a retention/cleanup policy; 2) verify OCR accuracy on sample images (fuzzy matching can misclassify some items); and 3) ensure you trust the agent runtime (the skill does not transmit data externally, but the platform running the skill could). If you need stricter privacy, avoid sending personally sensitive images or add an explicit step to encrypt or purge stored JSONs.
Latest Release
v1.0.0
team-weekly-report v1.0.0 - 首次发布,支持团队周报的图片收集、分类、归档与纯文本汇总输出 - 自动将内容分为「部门管理」与「项目管理」两大维度 - 支持对比上周计划与本周完成,智能标注未达成及新增项 - 所有数据持久化分周存储,便于历史检索 - 输出结构清晰、纯文本格式,可直接复制使用
More by @gotoloops
Published by @gotoloops on ClawHub