team-quality-daily-report

Generate team quality daily report automatically

This skill appears to do what it says: automate a browser to capture a dashboard API payload, fetch data, and generate local JSON/Markdown reports. Before installing or running it, consider the following: 1) It connects to your Chrome and reuses login session/cookies — only run it if you trust the code and the target dashboard; the skill will be able to access anything your logged-in browser can. 2) The package depends on an external helper package (@bondli-skills/shared) which is not included in this review; audit that dependency (or inspect its source) because it implements the connectBrowser helper and may perform additional actions. 3) You must install Node dependencies (pnpm/npm) and possibly allow puppeteer to download Chromium or connect to an existing browser. 4) The skill saves files to ~/openclaw-skill-data/team-quality-daily-report/ — verify that config.json points to the intended internal/external API and does not contain secrets. 5) Avoid running it unattended (cron) while a privileged or unrelated browser session is active unless you trust all code and dependencies. If you want higher confidence, request the source for @bondli-skills/shared and verify there is no unexpected network exfiltration or credential usage.

Type: OpenClaw Skill Name: team-quality-daily-report Version: 1.0.0 The skill is a legitimate automation tool designed to generate team quality reports by scraping data from a dashboard (specifically targeting a Kuaishou internal domain as seen in config.example.json). It uses Puppeteer in dist/utils/api.js to intercept XHR requests and replay them with updated date filters to fetch metrics, which are then saved locally and formatted into a Markdown report. The behavior is transparently described in SKILL.md and README.md, and no evidence of data exfiltration, malicious execution, or prompt injection was found.