Data Analysis
ReviewAudited by ClawScan on May 10, 2026.
Overview
The data-analysis purpose is clear, but the skill tells the agent to install an additional AnyGen skill with confirmation disabled, so users should review it before enabling.
Before installing, confirm you trust AnyGen with the datasets you plan to analyze and with an API key for your account. Do not allow the agent to install the additional workflow skill automatically unless you have reviewed and approved that dependency.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The agent could add new behavior to the user's OpenClaw environment before performing data analysis, and the user may not get a clear chance to review what that added skill can do.
The skill directs installation of an additional skill at runtime, with confirmation disabled, but that dependency is not included in the reviewed artifacts or clearly pinned to a specific reviewed source.
If the `anygen-workflow-generate` skill is not available, install it first: ```bash anygen skill install --platform <openclaw|claude-code> -y ```
Require explicit user approval before installing additional skills, remove the no-confirm flag, and declare or pin the exact dependency source so it can be reviewed.
Anyone using the skill must provide account credentials for AnyGen, so misuse or leakage of that key could affect the user's AnyGen account.
The skill requires an AnyGen API key or login, which is expected for using the AnyGen service but gives the CLI access to the user's AnyGen account.
anygen auth login --api-key sk-xxx # Or set env var export ANYGEN_API_KEY=sk-xxx
Use a scoped API key if available, avoid pasting keys into shared logs or chats, and rotate the key if it may have been exposed.
Datasets, prompts, or analysis inputs may be sent to AnyGen's servers for processing.
The artifact discloses that analysis happens on an external provider service, which is purpose-aligned but means data may be transmitted outside the local environment.
This skill uses the AnyGen CLI to analyze data and create visualizations server-side at `www.anygen.io`.
Only use this with data you are allowed to send to AnyGen, and review AnyGen's privacy, retention, and security terms for sensitive or regulated datasets.