Data Analyst
Security checks across malware telemetry and agentic risk
Overview
The skill's files and runtime instructions match a data-analysis tool, but the package metadata omits required environment variables and runtime dependencies (DB connection strings, DB client binaries, Python/pandas), which is an incoherence you should understand before installing.
This skill appears to implement a reasonable local data-analysis toolkit, but the package metadata omits important runtime requirements. Before installing or running it: 1) Inspect the scripts (data-init.sh and query.sh) yourself — they will create files under $HOME/.openclaw and run local DB clients. 2) Do not provide production DB credentials to this skill; if you run queries, use a read-only account and limit network access. 3) Ensure required binaries (sqlite3, psql, mysql) and Python + pandas are present and trusted; the skill does not install them. 4) Consider running the skill in a sandbox or test environment first. 5) If you plan to use cloud warehouses or Google Sheets, confirm how credentials will be stored and used (the skill does not declare or manage those secrets). If the owner/source is unknown, exercise extra caution and prefer manual review and least-privilege credentials.
SkillSpector
SkillSpector findings are pending for this release.
VirusTotal
No VirusTotal findings