从银行/券商PDF流水自动提取信息，生成美化的CRS金融账户信息申报表。支持PDF解析、数据提取、表格生成。

This skill appears to do what it says: extract text from text-based PDFs and produce a beautified Excel CRS report. Before installing/using it, consider: - Run it offline or in an isolated environment when processing real customer PII because PDFs contain sensitive data. - Ensure your PDFs are text (not scanned images); the script uses pdfplumber and will not OCR images. - Verify the claimed '脱敏' behavior on sample data — the code does not implement clear automatic redaction, so you should manually inspect outputs before sharing. - Install and audit dependencies locally (pip install pdfplumber openpyxl) and review the script if you need guarantees about data handling (no network calls are present in the code). - Test with non-sensitive example files first and confirm output meets regulatory/compliance needs; final submissions should be reviewed by a qualified professional as the SKILL.md itself advises.

Type: OpenClaw Skill Name: crs-report-generator Version: 1.0.0 The skill bundle is classified as suspicious due to a critical discrepancy between the stated functionality in `SKILL.md` and the actual behavior of `scripts/crs_generator.py`. The `SKILL.md` claims "信息脱敏 - 自动去除敏感信息，只保留模板" (Information desensitization - automatically remove sensitive information, only retain the template), but the Python script `crs_generator.py` extracts sensitive financial data (client name, account number, balances, transactions) from the input PDF and writes it directly into the generated Excel report without any desensitization. This misrepresentation could lead to unintentional disclosure of sensitive user data, as users might believe their information is anonymized when it is not.