地方政府采购商机自动抓取工具（非军队采购）。从北京中建云智、湖南政府采购网等地方政府采购平台抓取招标公告，按关键词过滤，补全采购人、代理机构、预算、时间节点等详情，生成 Excel 报表。与 milb-fetcher（军队采购）互补，本工具专注地方政府渠道。

This skill's code generally matches its description (scraping Beijing and Hunan procurement sites and creating Excel reports). Before installing: 1) Understand it needs site credentials for the Beijing source (Bearer token and cookies) — only provide these if you trust the source. 2) The tool will write session tokens into a .env file (local .env or ~/.config/govb-fetcher/.env); treat those files as sensitive and remove/revoke tokens after use if needed. 3) The registry omitted declaring these env vars — that's an inconsistency; ask the publisher or inspect the code yourself before supplying secrets. 4) Consider running the package in a sandbox/container or on a throwaway account, and inspect pyproject.toml and the code paths if you plan to install system-wide. 5) If you must use a proxy, ensure it is trusted (attacker-controlled proxy could capture credentials and scraped data).

Type: OpenClaw Skill Name: goverment-bidding-fetcher Version: 0.1.10 The govb-fetcher skill is a legitimate tool designed to automate the collection of government bidding information from Beijing and Hunan procurement platforms. It manages authentication credentials locally in a .env file and includes logic to automatically refresh session cookies from the target server (zbcg-bjzc.zhongcy.com). The implementation in govb_fetcher/fetcher.py and govb_fetcher/config.py is transparent, follows standard scraping practices, and lacks any indicators of malicious intent, data exfiltration to third parties, or prompt injection attacks.