Skills/ClawHub/file-to-database-skill

file-to-database-skill@0.1.0

CAUTION

Publisher claims: "Use when the user wants to build a database from data files (CSV/Excel/JSON/JSONL/TSV), design a schema from raw data, or turn flat files into tables — AND when the user later talks to that database in natural language (add, query, update, delete records; 'how many...'; 'show me...'). Scans files, infers column types, detects candidate foreign keys, applies the methodology in references/methodology.md to produce DDL, ERD, seed scripts, and validation; runtime operations follow references/operations.md (intent → SQL → safe execution → natural-language report). Do NOT use for ORM code generation or pure database concept discussions." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher thomaszhou22 · joined 4 days agoInstalls 38Last detonated 4d ago

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario) on 2026-10-22 and scored it 76/100 (Caution). It is not known to be malicious, but it has behaviour or code a security policy should decide on before install. Notable findings: Access to sensitive file paths; File permission modification command; Refusal suppression. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only

Static findings

CRITICAL
Access to sensitive file pathsreferences/engineering.md:48 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
MEDIUM
File type combined with upload actionreferences/operations.md:29 · File type combined with upload action — agent may exfiltrate local data files
AST07
HIGH
File permission modification commandreferences/engineering.md:72 · File permission modification command — agent changes file ownership/permissions
AST05
HIGH
Refusal suppressionreferences/intake.md:3 · Refusal suppression — attempting to prevent safety responses
AST01
HIGH
Refusal suppressionSKILL.md:22 · Refusal suppression — attempting to prevent safety responses
AST01
MEDIUM
File type combined with upload actionreferences/engineering.md:72 · File type combined with upload action — agent may exfiltrate local data files
AST07
MEDIUM
File type combined with upload actionreferences/operations.md:93 · File type combined with upload action — agent may exfiltrate local data files
AST07