Flexible Data Importer

• Outcome: Review
• Latest audit: Jul 10, 2026 · 3:35 AM UTC
• Version: 1.0.0

Overview

This skill has a coherent data-import purpose, but it asks for powerful database credentials and can send local data to external services without enough safety scoping or warnings.

Review carefully before installing. Use a staging or dedicated Supabase project, avoid production service-role keys where possible, back up data, rotate any keys used, verify the actual npm package contents, and do not import confidential or regulated datasets unless you accept that samples or records may be sent to the LLM provider and Supabase.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (10)

Missing User Warnings

Medium

• Confidence: 90% confidence
• Finding: The README explicitly states the tool uses an LLM to ingest and infer structure from user-supplied datasets, which implies dataset contents or samples may be sent to an external AI provider. Without a clear privacy, retention, and data-handling warning, users may unknowingly expose sensitive or regulated data to third-party services.

Missing User Warnings

Medium

• Confidence: 87% confidence
• Finding: The README advertises direct UPSERT support into Supabase but does not warn that running the importer can create or modify remote database records. In an agent or automation context, this increases the risk of unintended writes, data corruption, or overwriting production data if users assume the tool is read-only or dry-run by default.

Missing User Warnings

Medium

• Confidence: 93% confidence
• Finding: The skill explicitly ingests local files and sends data to Supabase, but the description does not warn users that file contents will be transmitted over the network to a third-party backend. This can lead to unintended disclosure of sensitive or regulated data because users may assume processing is local-only.

Missing User Warnings

High

• Confidence: 97% confidence
• Finding: The skill requires a Supabase service role key, which is a high-privilege credential typically capable of bypassing row-level protections and performing administrative actions. Failing to warn users about the sensitivity of this secret increases the chance of unsafe handling, overexposure, or misuse that could compromise the entire database.

Unpinned Dependencies

Low

• Category: Supply Chain

Content

"author": "OpenClaw",
  "license": "MIT",
  "dependencies": {
    "@supabase/supabase-js": "^2.39.0",
    "csv-parser": "^3.0.0",
    "dotenv": "^16.3.1",
    "xlsx": "^0.18.5",

• Confidence: 71% confidence
• Finding: "@supabase/supabase-js": "^2.39.0"

Unpinned Dependencies

Low

• Category: Supply Chain

Content

"license": "MIT",
  "dependencies": {
    "@supabase/supabase-js": "^2.39.0",
    "csv-parser": "^3.0.0",
    "dotenv": "^16.3.1",
    "xlsx": "^0.18.5",
    "zod": "^3.22.4"

• Confidence: 71% confidence
• Finding: "csv-parser": "^3.0.0"

Unpinned Dependencies

Low

• Category: Supply Chain

Content

"dependencies": {
    "@supabase/supabase-js": "^2.39.0",
    "csv-parser": "^3.0.0",
    "dotenv": "^16.3.1",
    "xlsx": "^0.18.5",
    "zod": "^3.22.4"
  },

• Confidence: 70% confidence
• Finding: "dotenv": "^16.3.1"

Unpinned Dependencies

Low

• Category: Supply Chain

Content

"@supabase/supabase-js": "^2.39.0",
    "csv-parser": "^3.0.0",
    "dotenv": "^16.3.1",
    "xlsx": "^0.18.5",
    "zod": "^3.22.4"
  },
  "devDependencies": {

• Confidence: 78% confidence
• Finding: "xlsx": "^0.18.5"

Unpinned Dependencies

Low

• Category: Supply Chain

Content

"csv-parser": "^3.0.0",
    "dotenv": "^16.3.1",
    "xlsx": "^0.18.5",
    "zod": "^3.22.4"
  },
  "devDependencies": {
    "@types/jest": "^30.0.0",

• Confidence: 69% confidence
• Finding: "zod": "^3.22.4"

Known Vulnerable Dependency: xlsx==0.18.5 — 2 advisory(ies): CVE-2023-30533 (Prototype Pollution in sheetJS); CVE-2024-22363 (SheetJS Regular Expression Denial of Service (ReDoS))

High

• Category: Supply Chain
• Confidence: 99% confidence
• Finding: xlsx==0.18.5

VirusTotal

66/66 vendors flagged this skill as clean.

Static analysis

No suspicious patterns detected.