ClawHub

Xml Reader

v2.1.0

Read and parse XML from construction systems - P6 schedules, BSDD exports, IFC-XML, COBie-XML. Convert to pandas DataFrames.

⭐ 0· 1.1k·1 current·1 all-time
by@datadrivenconstruction
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description match the manifest and SKILL.md: an XML parsing helper for construction formats. The manifest requests python3 and filesystem permission which are reasonable for reading user-provided XML files and producing DataFrames.
✓
Instruction Scope
SKILL.md contains Python parsing code and instructions that operate on files/data provided by the user. The instructions do not instruct the agent to read unrelated system files, contact external endpoints, or collect unrelated secrets.
✓
Install Mechanism
This is an instruction-only skill with no install spec or external downloads. That minimizes install-time risk; the skill only requires a local python3 binary to be present.
✓
Credentials
No environment variables or credentials are requested. The manifest requests filesystem permission only, which is proportional to reading user-supplied files.
ℹ
Persistence & Privilege
always:false and default autonomous invocation are used (normal). The manifest declares filesystem permission which is needed for reading files but is a broad permission — the user should be aware it grants access to local files the agent can reach.
Assessment
This skill appears coherent for parsing construction XML and converting to pandas DataFrames. Before installing, consider: (1) filesystem access is declared — only provide files you intend the agent to read; (2) the SKILL.md includes Python XML parsing that will run on user-supplied files, and parsing untrusted XML can have risks (excessive resource usage from 'billion‑laughs' style payloads or other XML-specific attack patterns). If you will feed untrusted XML, prefer a hardened parser (defusedxml) or limit input size. Also verify you trust the skill source (homepage is provided but author is unknown) and ensure python3 is available in the environment. Finally, note a minor metadata mismatch: claw.json lists version 2.0.0 while registry metadata lists 2.1.0 — likely harmless but worth confirming.

Like a lobster shell, security has layers — review code before you run it.

latestvk973sz0qr51754ptkj4cxybtex816nst

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Runtime requirements

🏷️ Clawdis
OSmacOS · Linux · Windows
Binspython3

Comments