ClawHub

Leo CSV Stats Analyzer

v1.0.0

Analyzes any CSV file and returns row count, column names, and basic statistics for numeric columns.

⭐ 0· 116·0 current·0 all-time
by@leotrieu
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description match the included code: analyzer.py reads a CSV and prints row/column counts and numeric stats. The included sample CSV aligns with the stated purpose.
ℹ
Instruction Scope
SKILL.md limits actions to running the helper script and returning its output. The script only reads the provided CSV and prints stats; it does not read other files, env vars, or contact external endpoints. Note: SKILL.md asks the agent to present output with emojis/formatting, which the script already produces.
ℹ
Install Mechanism
There is no install spec (lowest risk). However SKILL.md instructs running via 'uv run --with pandas', implying the runtime must provide the 'uv' runner and pandas. The registry metadata did not list required binaries or dependencies, so you should confirm your environment provides 'uv' and pandas or understand how 'uv run' resolves/installs packages.
✓
Credentials
The skill requests no environment variables, credentials, or config paths. The script does not access secrets or unrelated system configuration.
✓
Persistence & Privilege
always is false and user-invocable is true. The skill does not request permanent presence or modify other skills or system settings.
Assessment
This skill appears to be what it claims: a small local CSV analyzer. Before installing/running: 1) Confirm your agent/runtime provides or trusts the 'uv' runner and understand what 'uv run --with pandas' does in your environment (does it download packages or run untrusted code?). 2) Ensure pandas is available or that automatic installs are acceptable. 3) Only run the skill on CSVs you are willing to expose to the agent — the script prints file contents-derived statistics and could reveal sensitive data in those outputs. 4) Note the minor metadata mismatch: SKILL.md lists 'uv' as a required binary and the script needs pandas, but the registry metadata didn't declare those; verify runtime dependencies before use.

Like a lobster shell, security has layers — review code before you run it.

latestvk97dsfc9qgkgjtktnsmsrq4z298387pd

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments