ClawHub

stata-skill

v1.0.0

The most stable way to execute Stata commands, install ado packages, read help documents, and analyze data. Use when working with Stata for (1) Running do-fi...

⭐ 0· 134·1 current·1 all-time
byS.Tam@sepinetam
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
ℹ
Purpose & Capability
The SKILL.md describes invoking the Stata-MCP CLI (uvx stata-mcp) to run do-files, install ado packages, read logs, and inspect data — this matches the declared purpose. However, the skill metadata lists no required binaries while the instructions explicitly state it requires 'uv' (uvx) and a valid Stata installation; the metadata omission is a mismatch that should be corrected.
✓
Instruction Scope
Instructions stay within expected scope: they tell the agent to run specific uvx stata-mcp commands, inspect data files (.dta, .csv, .xlsx), and read execution logs. The doc notes a security guard blocks dangerous shell commands. There are no broad, vague directives to exfiltrate system data or read unrelated config paths.
ℹ
Install Mechanism
No install spec is provided (instruction-only), which is low-risk. SKILL.md references external docs and a GitHub project (stata-mcp) and includes the sentence 'The skill could install or update from https://docs.statamcp.com/skills/openclaw' — this suggests an external install/update flow outside the registry metadata. If you follow those links to install code, review the sources before running downloads.
✓
Credentials
The skill does not request environment variables, credentials, or config paths. Its runtime needs (access to local data files, logs, and the Stata executable) are proportional to its stated function.
✓
Persistence & Privilege
always is false and model invocation is allowed (normal). The skill does not request persistent system privileges or to modify other skills. No indicators of elevated or permanent platform presence.
Assessment
This instruction-only skill looks coherent for controlling Stata via the Stata‑MCP CLI. Before installing/using it: (1) ensure you have uvx (uv) and a licensed Stata installed locally — the skill metadata should declare these but currently does not; (2) only install stata-mcp or follow external links (docs.statamcp.com, GitHub) after verifying the project/release integrity; (3) be aware the skill will operate on local data files and logs (it must be able to read/write them), so do not grant agent access to sensitive datasets unless you intend that; (4) if you rely on the claimed 'security guard', ask the skill author for details or tests showing which shell or destructive commands are blocked. If you want stricter assurance, request the author add explicit required-binaries metadata and an install spec that points to a verifiable release URL.

Like a lobster shell, security has layers — review code before you run it.

latestvk97fg5dpe3yp8mj20dq6tp8g29839vdy

License

MIT-0
Free to use, modify, and redistribute. No attribution required.
Termshttps://spdx.org/licenses/MIT-0.html

Comments