tabular data processing and analysis

v1.0.3

端到端表格数据引擎:提供工业级表格预处理(拆分、清洗、表头合并、描述生成),并支持在受控前提下进行深度探索性分析、可视化与报告生成。

10· 144·0 current·0 all-time
byTable Intelligence Group@cutesxy
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
medium confidence
Purpose & Capability
Name/description match the code and runtime instructions. Requiring python and OPENAI_API_KEY is consistent with the skill's documented LLM-powered features (merge_header, describe_table, some EDA/report generation). No unrelated credentials or binaries are requested.
Instruction Scope
SKILL.md and the scripts allow reading workspace CSV/XLSX files and will, when LLM features are enabled, send table headers/schema and small sample rows to the configured OpenAI-compatible service. The SKILL.md documents constraints (minimal-send, sensitive-data defaults, --no-abstract flag) but the skill also allows the Agent to dynamically generate and execute Python for EDA — this grants the agent a broad runtime capability that could access other files or be misused if not controlled. The instructions do not direct the agent to read unrelated credentials or system config, but dynamic code execution is a notable surface to monitor.
Install Mechanism
No remote download/install spec in the registry; packaged as code + requirements.txt. Dependencies are standard (pandas, openai, matplotlib, etc.). Installing via pip -r requirements.txt is expected and proportional; there are no URLs or extract steps that would raise high install-risk flags.
Credentials
Only OPENAI_API_KEY is declared as required and is used by the LLM client. Optional OPENAI_BASE_URL and OPENAI_MODEL are referenced in docs/code but not required. No unrelated secrets or config paths are requested. The code explicitly reads the API key from env and will raise an error if missing — consistent with declared primary credential.
Persistence & Privilege
Skill does not request always:true, does not claim persistent system-wide modifications, and does not require access to other skills' config. It runs as an on-demand skill and writes only output files (cleaned CSV, description JSON) in specified output directories.
Assessment
This skill appears to be what it says: a Python-based table preprocessor and EDA helper that uses an OpenAI-compatible LLM for intelligent header merging and summaries. Before installing or running it, consider the following: - Treat OPENAI_API_KEY as sensitive: the skill will (by design) send headers/schema and sometimes sample rows to the configured LLM; do not enable LLM features on tables containing PII, financial data, credentials, or other sensitive content unless you accept remote exposure. Use the --no-abstract flag or disable merge_header when you want to avoid sending data to the remote LLM. - Dynamic code execution: the EDA step allows the agent to generate and run Python code. Run the skill in a sandboxed environment or isolated workspace, and review generated code before execution if possible to prevent accidental directory traversal or data exfiltration. - Use minimal-sending defaults: when you must use LLM features, prefer sending only schema, aggregated stats, or redacted samples. The skill's docs recommend these practices — enforce them in agent policies or by disabling LLM features when privacy is required. - Dependency installation: install requirements in a virtual environment and audit dependencies (openai, pandas, matplotlib). The repo does not perform external downloads beyond pip package installation. If you want a lower-risk setup: run the non-LLM parts (split/clean/transfer) locally and keep OPENAI_API_KEY unset; alternatively configure a private/enterprise LLM endpoint (OPENAI_BASE_URL) with strict monitoring and token scope limits. If you need additional assurance, request a code review focusing on any added/truncated files (the listing shows some files omitted) and enable runtime logging to observe which files are read and what is sent to the LLM.

Like a lobster shell, security has layers — review code before you run it.

latestvk9707pckjvynh6jdvyd4c8kj8x83tm74

License

MIT-0
Free to use, modify, and redistribute. No attribution required.

Runtime requirements

📊 Clawdis
Binspython
EnvOPENAI_API_KEY
Primary envOPENAI_API_KEY

Comments