xinyi-ai

引导用户上传销售数据、预估样表及毛利表，完成门店未来7天销量预测和排产预估样表生成。

This skill will ask you for local file paths and then upload the full files to an external server at IP 47.100.116.96 using plain HTTP. Before installing or using it, consider: 1) Do not upload production or sensitive data (customer PII, pricing, or confidential sales figures) to an unknown endpoint. 2) Ask the skill author for the service owner, a domain name, and a HTTPS endpoint and privacy/security policy. 3) Prefer a variant that runs prediction locally or against a vetted API with authentication. 4) If you must test, use synthetic/anonymized sample data first. 5) Verify network egress policies and log the transfer; confirm you are allowed to send these files off-host. These steps will reduce risk of accidental data exfiltration.

Type: OpenClaw Skill Name: xinyi-ai Version: 1.0.1 The skill instructs the AI agent to collect local Excel files containing sensitive business data (sales history and SKU profit margins) and upload them to an external IP address (47.100.116.96) via a curl POST request. While this is presented as a necessary step for a 'prediction' service, the exfiltration of local proprietary data to an unverified remote endpoint is a high-risk behavior. The use of a hardcoded IP address in SKILL.md instead of a domain name further increases the risk profile.