← 返回 Skills 市场
SCF Deep Analysis
作者
samledger67-dotcom
· GitHub ↗
· v1.0.2
· MIT-0
243
总下载
0
收藏
1
当前安装
3
版本数
在 OpenClaw 中安装
/install scf-deep-analysis
功能描述
Controller-level Statement of Cash Flows deep analysis for QBO-connected clients. Computes CF Quality Ratio, Free Cash Flow, working capital movement drivers...
安全使用建议
This skill's description and runtime instructions expect a local Python script, a QBO connection, and a QBO auth token, but the package you reviewed contains no code and declares no credentials. Before installing or running: (1) confirm you actually have the referenced repository/script (scripts/pipelines/scf-deep-analysis.py) from a trusted source; (2) ask the publisher to explain which CLI provides the undocumented 'report {slug} cf' command and why Node.js is required; (3) verify how QBO credentials should be provided and stored (the registry should declare required env vars); (4) test in a QBO sandbox and on non-production data first; (5) inspect any local cache (.cache/scf-deep-analysis) and output paths to ensure they don't leak client PII; and (6) request source code or a homepage from the publisher — if they cannot supply these or the discrepancies remain, treat the skill as untrusted.
功能分析
Type: OpenClaw Skill
Name: scf-deep-analysis
Version: 1.0.2
The skill bundle contains metadata and documentation for a financial analysis tool designed to process QuickBooks Online (QBO) Statement of Cash Flows data. The SKILL.md file outlines a standard analytical workflow, including calculating financial ratios, identifying variances, and generating an Excel report. No malicious instructions, data exfiltration patterns, or prompt injection attempts were found in the provided files (_meta.json and SKILL.md).
能力评估
Purpose & Capability
The SKILL.md clearly requires a QBO connection, a QBO auth token, and a local Python script (scripts/pipelines/scf-deep-analysis.py) to run; the registry metadata declares no credentials, no code files, and no required env vars. That mismatch (a data‑sensitive integration that asks for tokens in docs but requests none in metadata) is inconsistent and unexplained.
Instruction Scope
Runtime instructions instruct pulling reports from QBO, P&L, GL vendor‑level transactions, reading/writing a cache path (.cache/scf-deep-analysis/{slug}.json), and writing an Excel workbook to disk (default ~/Desktop). The doc references a 'report {slug} cf' command and a local Python script — but does not define what CLI provides 'report', nor where the script comes from. Access to GL vendor transactions (potentially sensitive PII) and arbitrary cache files increases scope and sensitivity.
Install Mechanism
There is no install spec and no downloaded code included with the skill (instruction-only), which lowers installer risk. The SKILL.md does require openpyxl and Node.js be present, but no install steps are provided by the registry package itself.
Credentials
The documentation requires a 'QBO auth token configured' and a connected QBO client slug, but the skill metadata lists no required environment variables or primary credential. This omission is disproportionate and confusing for a skill that needs access to accounting data. The skill also reads a local cache path and writes output files, but those paths were not declared as required config access.
Persistence & Privilege
always is false and the skill does not request permanent platform presence. It does read and update a local cache (.cache/scf-deep-analysis) and writes reports to disk — normal for a pipeline — but any cached files could persist sensitive data between runs, so users should review the cache handling.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install scf-deep-analysis - 安装完成后，直接呼叫该 Skill 的名称或使用
/scf-deep-analysis触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.2
Updated SKILL.md
v1.0.1
Security cleanup: removed internal references, genericized examples
v1.0.0
Initial release
元数据
常见问题
SCF Deep Analysis 是什么？
Controller-level Statement of Cash Flows deep analysis for QBO-connected clients. Computes CF Quality Ratio, Free Cash Flow, working capital movement drivers... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 243 次。
如何安装 SCF Deep Analysis？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install scf-deep-analysis」即可一键安装，无需额外配置。
SCF Deep Analysis 是免费的吗？
是的，SCF Deep Analysis 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
SCF Deep Analysis 支持哪些平台？
SCF Deep Analysis 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 SCF Deep Analysis？
由 samledger67-dotcom（@samledger67-dotcom）开发并维护，当前版本 v1.0.2。
推荐 Skills