自动填写 iHub 测试农场平台指定日期的日报，支持自定义账号密码和Markdown格式内容输入。

This skill appears to do what it claims: automate filling an iHub daily report by logging in and injecting JavaScript via a browser automation tool. Before installing or using it: 1) Only provide your iHub credentials if you trust the skill and the environment — prefer a low-privilege or test account. 2) Confirm the BASE_URL matches your real corporate iHub (avoid giving credentials to unexpected domains). 3) Understand that the agent will perform browser actions and use evaluate() JS injection — that can read or modify anything visible in the browser session, so avoid using high-privilege accounts or sessions with sensitive data. 4) If possible, run the included index.js in a safe/test environment first and review the code (it only composes dates and returns step instructions; actual automation is performed by the agent's browser tool). 5) If you require stronger protection, consider using temporary credentials or manual confirmation before the skill submits the final report.

Type: OpenClaw Skill Name: ihub-daily-report Version: 1.0.2 The skill automates daily report submission on the iHub platform (ihub.testfarm.cn) and requires users to provide plaintext login credentials (username and password) as input parameters. While the logic in index.js and the automation instructions in SKILL.md appear consistent with the stated purpose, the practice of handling sensitive credentials directly through the AI agent is a high-risk pattern. No evidence of intentional exfiltration to unauthorized third-party endpoints was found, but the skill's design facilitates the collection and processing of user secrets.