by 安全扫描
OpenClaw
安全
high confidenceNULL
评估建议
This skill is an instruction-only methodology for data analysis and appears internally consistent. Before using it: (1) do not give the agent production write or broad credentials — provide read-only, least-privilege access (prefer a replica or limited dataset); (2) review and approve any SQL the agent proposes before execution; (3) be cautious about granting access to shared drives/spreadsheets—limit scope to only the files needed; (4) the README links to external paid content—treat external li...详细分析 ▾
✓ 用途与能力
The skill's name and README match the SKILL.md content: an analyst methodology (DICE), profiling/checklist, SQL templates and reporting guidance. It does not request unrelated binaries, credentials, or system access.
ℹ 指令范围
The runtime instructions stay within data-analysis scope (profiling, cleaning, SQL templates, visualization guidance). They assume the agent or operator will run queries against databases or read spreadsheets; the SKILL.md does not instruct reading unrelated system files or exfiltrating data. Caution: the templates imply running SQL against your data — only provide least-privilege (read-only, replica or limited) access when connecting any agent to a DB, and review any queries before execution.
✓ 安装机制
No install spec or code is included (instruction-only), so nothing is written to disk or auto-downloaded by the skill. The README shows a user-facing 'clawhub install' example and an external link for paid content, but the package metadata contains no automated installer.
✓ 凭证需求
The skill declares no required environment variables, credentials, or config paths. In practice, to run the provided SQL the agent will need database access supplied by the user — that is a user decision and should be restricted to read-only, minimal-scope credentials.
✓ 持久化与权限
The skill is not always-enabled, is user-invocable, and does not request persistent system-level privileges or modifications to other skills. Autonomous invocation is allowed (default) but there are no added privilege escalations in the skill itself.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/2/13
NULL
● 无害
安装命令
点击复制官方npx clawhub@latest install afrexai-data-analyst
镜像加速npx clawhub@latest install afrexai-data-analyst --registry https://cn.longxiaskill.com