Token导航 LogoToken导航

Agent Skill · 研究检索

audit-xls(审计.xls)

用于辅助安全审计、权限检查、凭据风险、认证流程和常见漏洞排查。它适合让 Agent 梳理敏感配置、检查依赖风险、分析鉴权逻辑或生成安全复核清单。使用时不能把工具输出直接当最终结论,涉及密钥、令牌、用户数据或生产系统时,应先确认最小权限、脱敏方式和操作边界。

audit-xls 是研究检索类 Agent Skill,可用宿主为 Codex、Claude、Cursor、Gemini CLI,通过GitHub 仓库获取,权限为执行命令;许可证信息还不明确,第三方扫描已通过,按安装量在研究检索类的 73,675 个 Skill 里排第 13,416。

总安装 9,405周安装 404GitHub Stars 7,832下载 3,297核验 2026-05-01

安装说明

本站只整理中文说明,不托管安装包,也不代用户安装。
GitHub
许可证
unknown

安装方式

通过对话安装

复制提示词发给支持本地命令或 Skills 的 AI 助手,先确认命令和权限,再让它执行。

请帮我安装这个 Agent Skill:audit-xls(审计.xls)
来源仓库:https://github.com/anthropics/financial-services-plugins
仓库路径:skills/audit-xls
安装命令:
npx skills add https://github.com/anthropics/financial-services-plugins --skill audit-xls
安装前请先检查当前环境是否支持对应 CLI,并向我确认将要执行的命令、安装目录、联网范围和文件读写权限;确认后再执行。

命令行安装

复制命令到本机终端执行。该命令会通过 npx skills 从第三方来源获取 Skill;本站只展示命令,不托管安装包,也不自动执行。

skills.shnpx skills
npx skills add https://github.com/anthropics/financial-services-plugins --skill audit-xls

这个 Skill 是做什么的

研究检索类 Skill 主要解决「找资料、核对事实、把来源整理清楚」的问题,通常会让助手先检索再总结。

审计电子表格中的公式和数据准确性,支持选区、单表或全模型等多种 scope 级别检查。深度校验资产负债表平衡、现金流勾稽、滚动预测逻辑和合并报表一致性,防范财务错报。适用于 DCF、LBO、三表模型等专业场景,输出包含错误定位和修改建议的详细报告。

安装方式:通过 npx skills add 命令从指定 GitHub 仓库添加,支持 Codex、Claude、Cursor 等宿主环境。发现重大错报时应立即冻结相关单元格并通知责任人,防止错误数据继续传播。

来源仓库内路径:skills/audit-xls

上手步骤

4 步
  1. 1

    确认自己的宿主工具

    公开资料标注支持 Codex、Claude、Cursor、Gemini CLI;先确认自己用的是其中之一,再按对应工具的 Skills 目录放置。

  2. 2

    拿到安装命令

    可以直接复制的命令是 npx skills add https://github.com/anthropics/financial-services-plugins --skill…;命令里的占位符换成自己的路径或密钥再执行。

  3. 3

    安装后重启宿主

    命令执行完要完全退出宿主工具再打开,让新装的 Skill 被重新扫描到,否则列表里可能看不到。

  4. 4

    按最小权限试用

    它需要执行命令,先在测试目录或测试账号里跑,确认没问题再放到正式项目。

常见问题

6 条

audit-xls 怎么安装?

在终端执行 npx skills add https://github.com/anthropics/financial-services-plugins --skill audit-xls。装完完全退出宿主工具再打开,让它重新扫描本地 Skill。

audit-xls 支持哪些 AI 工具?

公开资料标注支持 Codex、Claude、Cursor、Gemini CLI。其他工具只要能读取本地 Skill 目录,一般也能手动放进去,但要自己确认触发方式是否一致。

audit-xls 需要什么权限?

权限级别是执行命令。安装流程涉及命令执行,可能通过 npx skills add https://github.com/anthropics/financial-services-plugins --skill audit-xls 联网下载 Skill 或依赖。用户安装前应确认命令来源、仓库内容和执行环境。

audit-xls 是免费的吗?

公开资料没有标注明确许可证,收费和商用限制都无法确认。正式使用前请到来源仓库核对授权说明。

audit-xls 用的人多吗?

公开数据是累计安装 9,405 次,近一周安装 404 次,下载 3,297 次,GitHub 7,832 星。这些数字来自第三方目录统计,只能当作热度参考,不代表质量或安全性。

audit-xls 安全吗?

第三方扫描结果为通过,但这只覆盖已知的静态检查项,不能替代自己读一遍源码和安装命令。

值得选的地方和要先想清楚的地方

值得选的地方

  • 同时适配 4 种工具,换客户端不用重新找替代品。
  • 第三方扫描已通过,常见的高风险行为没有命中。
  • 来源仓库有 7,832 星,维护活跃度相对可查。

先想清楚的地方

  • 需要执行命令,装到常用环境前要先评估影响面。
  • 许可证没有明确标注,能不能商用、能不能再分发都不确定。
  • 第三方目录整理,版本更新和行为细节以来源仓库为准。

适不适合你

更适合

  • 已经在用 Codex,想直接扩展它能力的人。
  • 需要处理研究检索类任务、又不想每次都手写提示词的人。

不太适合

  • 不能接受 Skill 在你机器上执行命令的人。
  • 需要明确授权才能用到公司项目里的场景。
  • 需要厂商级技术支持和 SLA 的生产系统。

研究检索类 Skill 对比

6 个同类
Skill总安装GitHub 星权限许可证扫描
find-skills

寻找技能 · Codex、Claude

31,199,81316,486操作浏览器MIT有提醒
self-improving-agent

自我改进 Agent · OpenClaw

16,464,0023,396接触敏感数据MIT-0通过
soultrace

灵魂追踪 · Codex、Claude

7,588,94412需要联网未明确有提醒
self-improving

自我完善 · OpenClaw

6,829,2841,046需要联网MIT-0通过
microsoft-foundry

微软代工厂 · Codex、Claude

6,614,144764调用外部服务未明确有提醒
audit-xls

审计.xls · 本页

9,4057,832执行命令未明确通过

按安装量取同分类前几名;数字来自第三方目录统计,只作热度参考,不代表质量结论。

SKILL.md 原文

Audit Spreadsheet

Audit formulas and data for accuracy and mistakes. Scope determines depth — from quick formula checks on a selection up to full financial-model integrity audits.

Step 1: Determine scope

If the user already gave a scope, use it. Otherwise ask them:

What scope do you want me to audit? - selection — just the currently selected range - sheet — the current active sheet only - model — the whole workbook, including financial-model integrity checks (BS balance, cash tie-out, roll-forwards, logic sanity)

The model scope is the deepest — use it for DCF, LBO, 3-statement, merger, comps, or any integrated financial model before sending to a client or IC.


Step 2: Formula-level checks (ALL scopes)

Run these regardless of scope:

CheckWhat to look for
Formula errors#REF!, #VALUE!, #N/A, #DIV/0!, #NAME?
Hardcodes inside formulas=A1*1.05 — the 1.05 should be a cell reference
Inconsistent formulasA formula that breaks the pattern of its neighbors in a row/column
Off-by-one rangesSUM/AVERAGE that misses the first or last row
Pasted-over formulasCell that looks like a formula but is actually a hardcoded value
Circular referencesIntentional or accidental
Broken cross-sheet linksReferences to cells that moved or were deleted
Unit/scale mismatchesThousands mixed with millions, % stored as whole numbers
Hidden rows/tabsCould contain overrides or stale calculations

Step 3: Model-integrity checks (MODEL scope only)

If scope is model, identify the model type (DCF / LBO / 3-statement / merger / comps / custom) and run the appropriate integrity checks below.

3a. Structural review

CheckWhat to look for
Input/formula separationAre inputs clearly separated from calculations?
Color conventionBlue=input, black=formula, green=link — or whatever the model uses, applied consistently?
Tab flowLogical order (Assumptions → IS → BS → CF → Valuation)?
Date headersConsistent across all tabs?
UnitsConsistent (thousands vs millions vs actuals)?

3b. Balance Sheet

CheckTest
BS balancesTotal Assets = Total Liabilities + Equity (every period)
RE rollforwardPrior RE + Net Income − Dividends = Current RE
Goodwill/intangiblesFlow from acquisition assumptions (if M&A)

If BS doesn't balance, quantify the gap per period and trace where it breaks — nothing else matters until this is fixed.

3c. Cash Flow Statement

CheckTest
Cash tie-outCF Ending Cash = BS Cash (every period)
CF sumsCFO + CFI + CFF = Δ Cash
D&A matchD&A on CF = D&A on IS
CapEx matchCapEx on CF matches PP&E rollforward on BS
WC changesSigns match BS movements (ΔAR, ΔAP, ΔInventory)

3d. Income Statement

CheckTest
Revenue buildTies to segment/product detail
TaxTax expense = Pre-tax income × tax rate (allow for deferred tax adj)
Share countTies to dilution schedule (options, converts, buybacks)

3e. Circular references

  • Interest → debt balance → cash → interest is a common intentional circ in LBO/3-stmt models
  • If intentional: verify iteration toggle exists and works
  • If unintentional: trace the loop and flag how to break it

3f. Logic & reasonableness

CheckFlag if
Growth rates>100% revenue growth without explanation
MarginsOutside industry norms
Terminal value dominanceTV > ~75% of DCF EV (yellow flag)
Hockey-stickProjections ramp unrealistically in out-years
CompoundingEBITDA compounds to absurd $ by Year 10
Edge casesModel breaks at 0% or negative growth, negative EBITDA, leverage goes negative

3g. Model-type-specific bugs

DCF:

  • Discount rate applied to wrong period (mid-year vs end-of-year)
  • Terminal value not discounted back
  • WACC uses book values instead of market values
  • FCF includes interest expense (should be unlevered)
  • Tax shield double-counted

LBO:

  • Debt paydown doesn't match cash sweep mechanics
  • PIK interest not accruing to principal
  • Management rollover not reflected in returns
  • Exit multiple applied to wrong EBITDA (LTM vs NTM)
  • Fees/expenses not deducted from Day 1 equity

Merger:

  • Accretion/dilution uses wrong share count (pre- vs post-deal)
  • Synergies not phased in
  • Purchase price allocation doesn't balance
  • Foregone interest on cash not included
  • Transaction fees not in sources & uses

3-statement:

  • Working capital changes have wrong sign
  • Depreciation doesn't match PP&E schedule
  • Debt maturity schedule doesn't match principal payments
  • Dividends exceed net income without explanation

Step 4: Report

Output a findings table:

#SheetCell/RangeSeverityCategoryIssueSuggested Fix

Severity:

  • Critical — wrong output (BS doesn't balance, formula broken, cash doesn't tie)
  • Warning — risky (hardcodes, inconsistent formulas, edge-case failures)
  • Info — style/best-practice (color coding, layout, naming)

For model scope, prepend a summary line:

Model type: [DCF/LBO/3-stmt/...] — Overall: [Clean / Minor Issues / Major Issues] — [N] critical, [N] warnings, [N] info

Don't change anything without asking — report first, fix on request.


Notes

  • BS balance first — if it doesn't balance, everything downstream is suspect
  • Hardcoded overrides are the #1 source of silent bugs — search aggressively
  • Sign convention errors (positive vs negative for cash outflows) are extremely common
  • If the model uses VBA macros, note any macro-driven calculations that can't be audited from formulas alone

平台分布

Codex

32.9%
按下载量换算1,085

Claude

32.78%
按下载量换算1,081

Cursor

18.12%
按下载量换算597

Gemini CLI

9.45%
按下载量换算312

安全审计

Gen Agent Trust Hub

通过

Socket

通过

Snyk

通过

权限和风险

执行命令

安装流程涉及命令执行,可能通过 npx skills add https://github.com/anthropics/financial-services-plugins --skill audit-xls 联网下载 Skill 或依赖。用户安装前应确认命令来源、仓库内容和执行环境。

安装前确认

本站仅展示第三方公开信息,不托管安装包,不提供自动安装或运行环境。安装前应自行审查源码、依赖和命令行为。目前只有一个公开来源,建议同时核对源仓库。

继续浏览同类 Skills