← 返回 Skills 市场
Generate responsive HTML pages suitable for reporting, supporting resizing and screenshot capture.
作者
Juguangyuan
· GitHub ↗
· v1.0.2
6847
总下载
0
收藏
43
当前安装
3
版本数
在 OpenClaw 中安装
/install report-generator
功能描述
Generates a structured report HTML based on a specific template. Invoke when user wants to create a report, slide, or summary card from raw content.
安全使用建议
Install only if you will use it with trusted report content or can update it to HTML-escape all user-supplied fields before rendering. Be aware it creates local HTML files and asks the agent to open them in a browser for screenshots.
功能分析
Type: OpenClaw Skill
Name: report-generator
Version: 1.0.2
The skill is suspicious due to a critical Cross-Site Scripting (XSS) vulnerability in `scripts/generate.py`. The script directly embeds user-provided data into an HTML template without any HTML escaping, allowing arbitrary JavaScript injection into the generated report. The `SKILL.md` then explicitly instructs the OpenClaw agent to open this locally generated HTML file using its `browser` tool (`file://<html_path>`). This creates a self-XSS vulnerability where the agent could execute malicious JavaScript from the report, potentially leading to local file access, network requests, or further agent manipulation if the browser tool is not adequately sandboxed.
能力评估
Purpose & Capability
The purpose is coherent: it turns structured report content into a local HTML report and screenshot. The main risk comes from how it renders user-provided content, not from a hidden unrelated capability.
Instruction Scope
SKILL.md tells the agent to run a Python script, then open the generated file with file:// for screenshot capture. scripts/generate.py inserts report fields directly into HTML without escaping, so untrusted input could inject active HTML or JavaScript before the browser step.
Install Mechanism
No package installation, remote bootstrap, credential setup, or privileged install behavior is present in the artifacts.
Credentials
Writing an HTML report is proportionate to the purpose, but automatically rendering unescaped local HTML in a browser broadens the environment exposure beyond simple report formatting.
Persistence & Privilege
The skill leaves generated HTML files in the requested output directory, but shows no background persistence, privilege escalation, credential access, network exfiltration, or destructive behavior.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install report-generator - 安装完成后，直接呼叫该 Skill 的名称或使用
/report-generator触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.2
- No changes detected in this version.
- SKILL.md contents remain the same.
v1.0.1
- Updated report template style description from "述职材料" to "clean, minimal business template style (Light & Concise)".
- No functional or usage changes; documentation was clarified for improved readability.
v1.0.0
- Initial release of the report-generator skill.
- Generates structured, stylish HTML reports using the "文娟述职素材" template.
- Organizes reports into a goal, four detailed quadrants (with titles, subtitles, slogans, bullet lists), and a summary.
- Provides clear instructions to convert the HTML output into an image using the browser tool.
- Includes example data structure for easy adoption.
元数据
常见问题
Generate responsive HTML pages suitable for reporting, supporting resizing and screenshot capture. 是什么？
Generates a structured report HTML based on a specific template. Invoke when user wants to create a report, slide, or summary card from raw content. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 6847 次。
如何安装 Generate responsive HTML pages suitable for reporting, supporting resizing and screenshot capture.？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install report-generator」即可一键安装，无需额外配置。
Generate responsive HTML pages suitable for reporting, supporting resizing and screenshot capture. 是免费的吗？
是的，Generate responsive HTML pages suitable for reporting, supporting resizing and screenshot capture. 完全免费（开源免费），可自由下载、安装和使用。
Generate responsive HTML pages suitable for reporting, supporting resizing and screenshot capture. 支持哪些平台？
Generate responsive HTML pages suitable for reporting, supporting resizing and screenshot capture. 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Generate responsive HTML pages suitable for reporting, supporting resizing and screenshot capture.？
由 Juguangyuan（@juguangyuan520-dotcom）开发并维护，当前版本 v1.0.2。
推荐 Skills