Mongo Db Client Tool
v1.0.0Interact with a MongoDB database for persistent document storage. Supports full CRUD operations (find, insert, update, delete), aggregation pipelines, collec...
⭐ 1· 260·1 current·1 all-time
by@jithinm
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (MongoDB client) align with the provided files: a Python CLI (mongo_client.py), a setup script that installs pymongo, and docs for configuring MONGO_URI or config.json. Required binary (python3) and the documented env vars are appropriate for the stated purpose.
Instruction Scope
SKILL.md restricts actions to MongoDB operations via a JSON payload and documents connection resolution and destructive-operation safeguards (drop/delete require a 'confirm' flag). One minor note: the client searches for config.json in both the skill dir and workspace paths (Path.cwd() candidate), so it could pick up a config outside the skill directory if present — expected for convenience, but worth being aware of.
Install Mechanism
There is no remote arbitrary download. Setup is a local shell script that creates a venv and pip-installs pymongo from PyPI (expected for a Python skill). INSTALL-UBUNTU.md references official MongoDB repos for local server install. These are standard and proportionate to the purpose.
Credentials
Declared and used environment variables are limited to MongoDB connection settings (MONGO_URI, MONGO_DB, MONGO_HOST, MONGO_PORT, MONGO_USER, MONGO_PASSWORD). No unrelated secrets or service credentials are requested.
Persistence & Privilege
Skill is not force-included (always: false). It creates a venv under its own scripts directory and does not modify other skills or system-wide agent settings. The skill can be invoked autonomously (platform default), which is expected for skills that perform DB operations — users should control when destructive payloads are sent.
Assessment
This skill appears to do exactly what it says: run MongoDB operations via a Python CLI. Before installing, verify which MongoDB instance the agent will talk to (MONGO_URI or config.json) and avoid pointing it at production data without review. Be cautious about granting any automated agent the ability to call operations that include 'confirm': true — those flags are the protection against accidental destructive actions (drop/delete). Running the provided setup script in an isolated environment is advisable (it creates a .venv and pip-installs pymongo). If you need higher assurance, inspect the full mongo_client.py (it’s included) and test against a non-production database.Like a lobster shell, security has layers — review code before you run it.
latestvk979tkm25kskr0nkmzb05vv9dh8266w7
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
🍃 Clawdis
Binspython3