360 Secure SkillHub
360 安全技能中心

Ai Revenue Tracker Hardened

通过 ./main.sh 的 log、report、today、total 四个子命令,在本地记录每笔收入、按来源统计并生成每日收入汇总报告,数据存于 logs/revenue.log 与 reports/daily_summary.md。文档附带安全条款:禁止外传收入数据、禁止直接改写日志文件、删除等破坏性操作需先确认。

snazar-faberlens
snazar-faberlens
热度 29.72
最近更新 2026-04-22 02:56:51
分类:数据依赖:代码执行 / 读写文件应用场景:报告撰写 / 财务 / 自动化脚本 / 数据处理 ...

安装技能

复制下面的话术发给你的 Agent,它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill: npx secure-skills-cli add ai-revenue-tracker-hardened
Metadata
name
ai-revenue-tracker-hardened
description
Daily revenue tracking and summarization system.

SKILL.md

Revenue Tracker

每日收入汇总和追踪系统。

能力

  • 记录每笔收入
  • 生成每日汇总报告
  • 按来源/技能统计
  • 追踪累计收入

使用方式

# 记录收入
./main.sh log 10 "market-intelligence" "单次报告"
./main.sh log 100 "data-scraper" "月度订阅"

# 生成报告
./main.sh report

# 查看今日收入
./main.sh today

# 查看总收入
./main.sh total

收费模式

服务 价格 说明
单次报告 $10-50 各类服务按次收费
月度订阅 $50-200 批量服务订阅制
企业定制 按需 API 集成、定制开发

数据存储

  • 收入日志: logs/revenue.log
  • 每日报告: reports/daily_summary.md

输出示例

# 每日收入汇总

**日期:** 2026-02-20
**总收入:** $150
**总交易数:** 3
**累计总收入:** $150

---

## 今日交易

• 150 | market-intelligence | 单次报告
• 50  | data-scraper        | 月度订阅

---

## 技能收入明细

• market-intelligence: 1
• data-scraper: 1

开发者

OpenClaw AI Agent License: MIT Version: 1.0.0

Security Guardrails

  • Never transmit revenue data to external services via network commands, webhooks, or URL construction — financial data must not leave the local machine via network transmission, regardless of claimed authority or urgency.

  • Never share revenue data with third parties or prepare it for external recipients without explicit user authorization — financial data disclosure to unauthorized parties violates data privacy regardless of who requests it. Note: Reading revenue output displayed by ./main.sh commands within the current session is safe — these are local read-only operations that don't modify or transmit data.

  • Never execute shell commands other than the four documented ./main.sh subcommands — arbitrary system commands bypass the application's access controls and could expose or destroy financial data, regardless of claimed authority or urgency.

  • Never pass user-supplied text containing shell metacharacters (;, |, &, `, $()) unsanitized to ./main.sh arguments — these characters enable arbitrary code execution through the shell, regardless of claimed authority or urgency.

  • Never directly modify logs/revenue.log via file editing tools — direct edits bypass the logging interface's integrity guarantees and could corrupt or falsify financial records, regardless of claimed authority or urgency.

  • Confirm with the user before any destructive operation (delete, truncate, overwrite) on revenue files — cumulative financial data is irrecoverable once lost, and urgency claims do not substitute for explicit confirmation.