chat2duckdb
v1.0.0基于 DuckDB 引擎的高效数据分析工具；当用户需要对 CSV/JSON/Parquet/Excel 等数据文件进行 SQL 查询、数据分析、数据抽样或需要自动纠错的查询执行时使用
⭐ 0· 50·0 current·0 all-time
by船长的虾@cloudcba
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (DuckDB-based data analysis) match the provided script and SKILL.md features: registering files as tables, SQL execution, sampling, correction, exporting, and persistence. Declared Python deps (duckdb, pandas, numpy, openpyxl) are appropriate for the stated capabilities.
Instruction Scope
Runtime instructions tell the agent/user to run the included script against local files and supply SQL; the script reads and writes local files and may persist a .duckdb DB — this is expected for the skill. Note: the script executes arbitrary SQL supplied by the user (expected functionality), so users should avoid running untrusted SQL against sensitive systems. Also there is a minor documentation inconsistency: references/data-formats.md says '当前版本不直接支持 Excel 文件', while SKILL.md and the script provide Excel handling via openpyxl.
Install Mechanism
No automated install spec is provided (skill is instruction+code), but SKILL.md lists Python dependency requirements. That means dependencies must be installed by the agent runtime or user (pip). This is proportionate but the skill will fail if the runtime doesn't provide those Python packages; no external download URLs or installers are present.
Credentials
The skill requests no environment variables, no credentials, and does not reference config paths beyond user-specified data and output file paths. This aligns with the stated purpose.
Persistence & Privilege
always:false and user-invocable:true. The script may write output files and an optional DuckDB file at a user-specified path (normal for this tool). The skill does not request persistent platform-wide privileges or modify other skills' configurations.
Assessment
This skill appears to do what it claims: run SQL over local CSV/JSON/Parquet/Excel files using DuckDB. Before installing or running it, consider: (1) install the listed Python packages (duckdb, pandas, numpy, openpyxl) in an isolated environment (virtualenv) so you avoid supply-chain issues; (2) only run the script on datasets you trust — it executes arbitrary SQL supplied to it and will read/write local files and optionally persist a .duckdb database; (3) the references file contradicts the SKILL.md on Excel support — verify Excel behavior in a safe test; (4) review the included script if you have sensitive data concerns (it contains local file I/O but no network calls or credential access). If you need to run this in production or on sensitive data, run it in a sandbox or container and audit outputs.Like a lobster shell, security has layers — review code before you run it.
latestvk97bqccwjqj7ahxjmmzr6tfmd98415eq
License
MIT-0
Free to use, modify, and redistribute. No attribution required.