Sheetsmith
v1.0.1Pandas-powered CSV & Excel management for quick previews, summaries, filtering, transforming, and format conversions. Use this skill whenever you need to inspect spreadsheet files, compute column-level summaries, apply queries or expressions, or export cleansed data to a new CSV/TSV/XLSX output without rewriting pandas every time.
⭐ 2· 3k·8 current·9 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description match the included code and tests: the CLI implements summary/preview/describe/filter/transform/convert for CSV/TSV/XLSX using pandas. No unrelated env vars, binaries, or install steps are requested.
Instruction Scope
SKILL.md and README instruct the agent to run the included Python CLI on files in the workspace or given paths — this is expected. The script uses pandas.DataFrame.query and DataFrame.eval (engine='python'), which necessarily execute user-provided expressions; this is required for the transform/filter features but is a potential execution surface if you run untrusted expressions or pass paths pointing to sensitive files. The README also mentions sending files via Telegram/WhatsApp and updating 'memory' logs — those are agent-level behaviors described in prose but not implemented in the provided code; treat those statements as informational only.
Install Mechanism
No install spec is present (instruction-only install), and the repository includes the script and tests. Dependencies are documented as system packages (pandas, openpyxl, xlrd, tabulate) but no automatic installer downloads arbitrary code during install.
Credentials
The skill requests no environment variables, credentials, or config paths. The operations require only file paths and standard Python libraries; nothing disproportionate is being asked for.
Persistence & Privilege
always is false and the skill does not request or modify other skills or global agent settings. It can overwrite files only when --inplace is explicitly used; no persistent background privileges are requested.
Assessment
This skill appears to do what it says: inspect and modify spreadsheet files using pandas. Before installing/using it:
- Review and run the included tests locally to confirm behavior in your environment.
- Be cautious when using --query or --expr: these accept pandas expressions and are evaluated (engine='python'), so do not execute expressions from untrusted sources. Preview results before writing and prefer --output (write a copy) instead of --inplace until you're confident.
- The README mentions agent behaviors like sending files via Telegram/WhatsApp and updating memory; these are not implemented in the script — treat those as documentation-level suggestions, not automatic behavior of the code.
- Verify dependencies (pandas, openpyxl, xlrd, tabulate) are installed in your environment. If you need higher assurance, review the script source (scripts/sheetsmith.py) yourself — it is small and self-contained with no network calls or hidden endpoints.Like a lobster shell, security has layers — review code before you run it.
latestvk97ap3efksjwvfbeew7pbtqncd80kw2f
License
MIT-0
Free to use, modify, and redistribute. No attribution required.