📦 Data Format Converter — 数据格式互转
v1.0.0在 CSV、JSON、XML、YAML、TOML 间高效互转，支持 CSV↔JSON、JSON↔YAML、XML↔JSON、TOML↔JSON 批量处理，一键完成多格式数据转换。
0· 669·4 当前·4 累计
by 下载技能包
最后更新
2026/4/23
安全扫描
OpenClaw
可疑
medium confidenceThe skill's description claims bidirectional and TOML support and batch processing, but the provided instructions/implementation are incomplete and inconsistent with those claims.
评估建议
This skill appears to be unfinished or inconsistent rather than overtly malicious. Before installing or using it: 1) ask the publisher to confirm supported conversions (especially TOML and json->csv and batch operations) and to provide complete implementations for parseYaml/parseXml; 2) test with non-sensitive sample data to verify correctness (CSV quoting, nested JSON, XML edge cases); 3) prefer implementations from a known/verified source; and 4) if you need robust, production-grade conversion...详细分析 ▾
⚠ 用途与能力
The name/description promise CSV↔JSON (bidirectional), TOML↔JSON, and batch processing, but the actual implementation snippet only provides csv->json, json->yaml, yaml->json and xml->json. There is no json->csv, no TOML handling, and no batch-processing logic. The declared supported formats in SKILL.md and the JS snippet disagree. This mismatch could be benign (unfinished) or misleading.
ℹ 指令范围
SKILL.md itself contains only conversion instructions and trigger phrases and does not request files, credentials, or network access — that is good. However, the included skill.yaml contains a code snippet that calls parseYaml and parseXml which are not defined or referenced; the CSV parser is also a naive split-on-comma implementation that doesn't handle quoting/escaping. The instructions are scoped but incomplete, which may cause the agent to attempt to load external libraries or fallback to unsafe behavior when invoked.
✓ 安装机制
This is an instruction-only skill with no install spec and no binaries required. There is nothing written to disk by an installer and no external download URLs — low install risk.
✓ 凭证需求
No environment variables, credentials, or config paths are requested; requested privileges are proportional (none).
✓ 持久化与权限
The skill is not marked always:true and makes no requests to change other skills or system-wide settings. Autonomous invocation is allowed (platform default) but is not combined with other red flags here.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/2/22
- Initial release of Data Format Converter. - Supports conversion between CSV, JSON, XML, YAML, and TOML. - Enables batch format conversion. - Triggered by phrases like "格式转换", "convert format", and specific format pairs (e.g., "csv to json"). - Provides clear input-output examples.
● 可疑
安装命令
点击复制官方npx clawhub@latest install data-format-converter
镜像加速npx clawhub@latest install data-format-converter --registry https://cn.longxiaskill.com