CSV Data Explorer
PassAudited by ClawScan on May 1, 2026.
Overview
The skill appears to be a normal local CSV analysis tool, with only routine cautions around dependency installation and user-provided filter expressions.
This looks suitable for local CSV exploration. Before installing, be aware that you may need to install pandas and matplotlib yourself, and review any filter condition before running it, especially if it came from an untrusted source.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
A poorly chosen or untrusted filter expression could behave unexpectedly during CSV filtering.
The filter command evaluates a user-provided condition string through pandas' Python query engine. This is central to the CSV filtering feature, but it makes filter expressions something users should review rather than blindly accept from untrusted text.
filtered = df.query(condition, engine='python')
Use simple, user-reviewed filter expressions and avoid letting untrusted CSV content or third-party text supply query conditions automatically.
Installing dependencies may fetch current package versions from the Python package ecosystem.
The skill relies on external Python packages for its core CSV and plotting functionality. The install command is user-directed and purpose-aligned, but the packages are not version-pinned in the artifact.
pip3 install pandas matplotlib
If reproducibility matters, install pandas and matplotlib in a virtual environment and consider pinning versions.