← 返回 Skills 市场
gwyang7

门店目标追踪分析

作者 Xtechmerge.AI · GitHub ↗ · v1.0.0 · MIT-0
cross-platform ⚠ suspicious
96
总下载
1
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install retail-target-tracking-analysis
功能描述
门店目标追踪分析工具。支持日/周/月三周期目标追踪,T-N数据延迟,黄绿黄灯状态预警。 核心能力: 1. 三周期追踪(日追踪-晨会/实时预警、周追踪-周会复盘、月追踪-月度考核) 2. T-N数据延迟支持(默认T-1) 3. 黄绿黄灯状态(🟢正常、🟡关注、🟠警告、🔴告警/紧急) 4. 批量告警检查(检查所...
安全使用建议
This skill is suspiciously under-documented: before installing, verify the missing pieces. Specifically: 1) Inspect the external api_client (get_copilot_data) that the code imports from /Users/yangguangwei/.openclaw/workspace-front-door — understand what network endpoints it calls and what credentials it needs. 2) Confirm you have (or are willing to supply) the local data files (~/.openclaw/workspace-store-ops-analyst/targets/*.json and cache user_stores_114.json) and that they don't contain secrets you don't want the skill to read. 3) Ask the publisher for an install spec and list of required environment variables/credentials; it is unsafe to run code that silently depends on a local API client. 4) Note the code contains apparent bugs/undefined variables in return values—test in a sandbox before using on production data. If you cannot verify the api_client and its network behavior, avoid enabling this skill or run it in an isolated environment.
功能分析
Type: OpenClaw Skill Name: retail-target-tracking-analysis Version: 1.0.0 The skill bundle contains a hardcoded absolute path to a specific user's home directory (/Users/yangguangwei/) in analyze.py, which is a significant security and portability flaw. Additionally, analyze.py contains functional bugs, such as referencing undefined variables (store_id, store_code, store_name) within the analyze_period function. While these issues indicate poor code quality and potential vulnerabilities, there is no clear evidence of intentional malicious behavior or data exfiltration.
能力评估
Purpose & Capability
The skill claims to be a local retail target-tracking analyzer and reads local target/mapping files (which is reasonable). However, the code imports get_copilot_data from an absolute, user-specific path (/Users/yangguangwei/.openclaw/workspace-front-door) that is not declared anywhere in the manifest or SKILL.md. That external dependency and implied API calls are not documented in the skill metadata (no required env vars, no install spec), so the runtime capability is under-specified and unexpectedly reliant on a local/remote service.
Instruction Scope
SKILL.md instructs reading files under ~/.openclaw and running analyze/check_alerts functions — expected for this purpose. But instructions do not mention the api_client dependency or network calls (fetch_actual_data calls get_copilot_data with '/api/v1/store/overview/bi'), so the true I/O surface (network/API access via an external client) is not disclosed. The SKILL.md also suggests cron usage but doesn't explain notification integration or required credentials.
Install Mechanism
There is no install spec, yet the package contains Python code that imports modules expected to exist in a specific user workspace. That implicit dependency on an out-of-repo module (via sys.path insertion of an absolute path) is fragile and risky: it will fail or behave unpredictably unless that external code and environment are present. No package sources or vetted release hosts are provided.
Credentials
Manifest declares no required env vars or credentials, but the code calls get_copilot_data (an API client not in the bundle). That client likely performs network requests and may need credentials or tokens stored elsewhere; those are not declared. The skill also reads user home data files (~/.openclaw/...), which may contain sensitive organization-specific data — this access is proportional to the stated purpose but should be documented and made explicit.
Persistence & Privilege
The skill is not marked always:true and does not request any platform-level privileges. It suggests a user cron schedule example, but that is an optional usage pattern invoked by the user. There is no evidence the skill modifies other skills or system-wide settings.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install retail-target-tracking-analysis
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /retail-target-tracking-analysis 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
Initial release: 支持日/周/月三周期目标追踪、T-N数据延迟、黄绿黄灯预警
元数据
Slug retail-target-tracking-analysis
版本 1.0.0
许可证 MIT-0
累计安装 0
当前安装数 0
历史版本数 1
常见问题

门店目标追踪分析 是什么?

门店目标追踪分析工具。支持日/周/月三周期目标追踪,T-N数据延迟,黄绿黄灯状态预警。 核心能力: 1. 三周期追踪(日追踪-晨会/实时预警、周追踪-周会复盘、月追踪-月度考核) 2. T-N数据延迟支持(默认T-1) 3. 黄绿黄灯状态(🟢正常、🟡关注、🟠警告、🔴告警/紧急) 4. 批量告警检查(检查所... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 96 次。

如何安装 门店目标追踪分析?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install retail-target-tracking-analysis」即可一键安装,无需额外配置。

门店目标追踪分析 是免费的吗?

是的,门店目标追踪分析 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

门店目标追踪分析 支持哪些平台?

门店目标追踪分析 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 门店目标追踪分析?

由 Xtechmerge.AI(@gwyang7)开发并维护,当前版本 v1.0.0。

💬 留言讨论