Report Expert

生成 HTML 报告页面并部署到 Cloudflare Pages 站点。涵盖设计系统、页面结构、索引管理、iframe 内嵌查看、自动部署全流程。触发词：写报告、发布报告、部署报告、生成报告页面、report publisher、报告专家、升级报告专家、更新报告技能、发布技能升级。

Key things to check before installing or running this skill: - Metadata mismatch: The registry lists no required env vars or binaries, but the skill expects CLOUDFLARE_API_TOKEN, a Cloudflare/wrangler toolchain, and the 'openclaw' CLI. Don't assume credentials or CLI tools are unnecessary — verify and provide only minimal-scoped tokens. - Review upgrade.py / manifest.repository: The skill supports self-updating by downloading files from the repository listed in manifest.json. Only run upgrade/update if you trust that remote repo. Ask for the repository URL and inspect it yourself. - Sensitive content leakage: The code calls an external AI via the 'openclaw ai' CLI and sends page bodies for classification/description — this can send confidential report content to whatever model/service your 'openclaw' CLI is configured to use. If you cannot accept that, disable the AI classification step or run it against a local/private model. - Deployment path overwrite: The skill will copy files to REPORT_LOCAL_DIR (from TOOLS.md) and can delete files when run with clean flags. Ensure REPORT_LOCAL_DIR is set to the intended deployment folder and not a sensitive system path. - Principle of least privilege: Create a Cloudflare token limited to Pages editing only (as recommended) and avoid storing secrets in versioned files. Prefer environment variables over committing secrets into TOOLS.md in a repo. - Test in a sandbox: Run the skill in a controlled environment (vm/container) first to observe network calls and file changes, and inspect upgrade.py and publish-related code (lib/skill_cf_publish.py, lib/remote_deploy.py) before giving production tokens. If you want, I can list the exact places in the code that call external tools or network endpoints (e.g., subprocess calls, file-write locations, and upgrade hooks) so you can inspect them in detail.

Type: OpenClaw Skill Name: report-expert Version: 1.6.12 The skill is a professional-grade tool for generating and deploying HTML reports to Cloudflare Pages. It features a robust architecture including automated indexing, a backup system, and a self-update mechanism (upgrade.py) that uses SHA256 checksums to verify file integrity. While it possesses high-risk capabilities such as managing Cloudflare API tokens and executing remote updates, these behaviors are transparently documented and strictly aligned with the skill's stated purpose of site management and deployment.