技能详情（站内镜像，无评论）
作者：Dan Repaci @ahuserious
许可证：MIT-0
MIT-0 ·免费使用、修改和重新分发。无需归因。
版本：v0.1.0
统计：⭐ 0 · 232 · 0 current installs · 0 all-time installs
⭐ 0
安装量（当前） 0
🛡 VirusTotal ：可疑 · OpenClaw ：可疑
Package：ahuserious/tearsheet-generator
安全扫描（ClawHub）
- VirusTotal ：可疑
- OpenClaw ：可疑
OpenClaw 评估
The skill generally matches a tearsheet/MAE analysis utility, but it contains several incoherences (hard-coded local dev paths, references to external trading systems and SDKs without declaring credentials or required binaries, and broad allowed-tools) that warrant caution before installation.
目的
The name/description describe tearsheet generation and MAE-based leverage recommendations, which aligns with the included Python helpers. However the SKILL.md repeatedly references external integrations (Nautilus Trader, Hyperliquid SDK, Ray Tune, a local path /Users/DanBot/Desktop/dev/Backtests/backtesting/tearsheets/strategy_comparison_tearsheet.py) and a 'Nautilus Verified' workflow. Those integrations would normally require credentials and…
说明范围
Instructions tell the agent to read arbitrary user-specified CSV/JSON files and to import/execute code from an absolute local path; they also instruct running verification with Nautilus Trader and applying leverage via SDKs. The skill's header allows Read/Write/Edit/Bash/Glob which would permit executing shell commands and reading/writing files anywhere the agent can access. There are no explicit limits or safeguards in the instructions about …
安装机制
There is no install spec (instruction-only plus one helper module included). That lowers supply-chain risk. The included Python helper file contains no obfuscated code or obvious network calls. No remote downloads or extraction steps are present.
证书
The skill references external services (Nautilus Trader, Hyperliquid) and integration points that normally require API keys, SDK access, or local binaries, but the registry metadata lists no required environment variables, credentials, or config paths. This mismatch means either the integration will silently fail or the runtime may try to access local credentials or prompt the agent to obtain them—both are potential security concerns.
持久
always:false (good). The skill allows Read/Write/Edit/Bash which lets it create files (tearsheets, JSON) and run commands; that is expected for a report generator but increases risk if the agent is allowed to run autonomously with those tools. The skill does not request persistent platform privileges or alter other skills.
安装（复制给龙虾 AI）
将下方整段复制到龙虾中文库对话中，由龙虾按 SKILL.md 完成安装。
请把本段交给龙虾中文库（龙虾 AI）执行：为本机安装 OpenClaw 技能「Tearsheet Generator」。简介：Generate professional tearsheets with custom SVG visualizations using the Quant…。
请 fetch 以下地址读取 SKILL.md 并按文档完成安装：https://raw.githubusercontent.com/openclaw/skills/refs/heads/main/skills/ahuserious/tearsheet-generator/SKILL.md
（来源：yingzhi8.cn 技能库）SKILL.md
暂无本地缓存内容，可在后台执行详情同步。