by 安全扫描
OpenClaw
可疑
medium confidenceThe skill largely does what it claims (generate JSONL training samples using an LLM), but the documentation and metadata promise Excel input and customizable prompts that the shipped code does not implement, and the code reads environment variables and sends prompts to a configurable HTTP endpoint — mismatches that warrant caution.
评估建议
This skill's code is small and readable, but there are important mismatches to be aware of: (1) SKILL.md advertises Excel input and a prompt_template parameter that the shipped Python file does not implement — so the documentation is unreliable. (2) The code reads MINIMAX_API_KEY / OPENAI_API_KEY and an API_URL env var (defaulting to http://127.0.0.1:8766). While the current code does not include the API key in request headers, it does send prompts and generated text to the configured API_URL. B...详细分析 ▾
⚠ 用途与能力
Name/description: data generation for training data — matches the code's purpose. Mismatch: SKILL.md and usage examples mention Excel input (excel_file) and prompt_template parameters; data_generator.py does not implement reading Excel files nor accept a prompt_template or excel_file parameter. The SKILL.md API and the actual code signature are not aligned.
⚠ 指令范围
SKILL.md instructs use with Excel and customizable prompts and shows a Generator.generate signature that accepts excel_file and prompt_template. The runtime code only accepts a list of commands and an optional output_file — it never reads Excel or any other files. Also the SKILL.md metadata declares python3 as required but does not declare any env vars, while the code reads MINIMAX_API_KEY, OPENAI_API_KEY and API_URL from environment.
✓ 安装机制
No install spec; this is an instruction-only skill with a small Python file. No remote downloads or archive extraction are performed by the registry/install metadata. Low install risk.
⚠ 凭证需求
Registry lists no required env vars, but the code reads MINIMAX_API_KEY and OPENAI_API_KEY and an API_URL (default http://127.0.0.1:8766). The api_key is captured in Generator but is not added to request headers in the current code (so not actively leaked). However the skill posts prompts to a configurable base_url; if API_URL is set to a remote host that host will receive prompts and LLM outputs. The mismatch between declared and accessed env vars and the ability to point to an arbitrary endpoint increases risk.
✓ 持久化与权限
always is false, skill is user-invocable, and there is no code that modifies system or other skills' configuration. No special persistence or elevated privileges requested.
安装前注意事项
- SKILL.md advertises Excel input and a prompt_template parameter that the shipped Python file does not implement — so the documentation is unreliable. (
- The code reads MINIMAX_API_KEY / OPENAI_API_KEY and an API_URL env var (defaulting to http://127.0.0.1:
- . While the current code does not include the API key in request headers, it does send prompts and generated text to the configured API_URL. Before installing or using: - Review and run the Python file locally to confirm behavior. - Ensure API_URL (if set) points to a trusted host (prefer localhost or an internal LLM) and do not set secrets in environment unless you trust the endpoint. - Do not supply sensitive or proprietary data until you're satisfied where prompts are sent. - If you need Excel support or prompt customization, note the current implementation lacks those features — expect to modify or extend the code. If you want a fully aligned/safer experience, ask the author to fix the documentation or update the code so declared inputs match implemented behavior.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.1.02026/3/19
- Added support for generating training data from user instructions using data_generator.py. - No changes to documentation or usage examples. - Version 1.1.0 focuses on internal improvements or feature extensions in the core Python file.
● 无害
安装命令 点击复制
官方npx clawhub@latest install data-generator-waai
镜像加速npx clawhub@latest install data-generator-waai --registry https://cn.clawhub-mirror.com
技能文档
Generate training data from Excel user instructions.
When to Use / 使用场景
| EN | CN |
|---|---|
| Generate training data from instructions | 从用户指令生成训练数据 |
| Batch produce AI training samples | 批量生成AI训练样本 |
| Build dataset from Excel | 从Excel构建数据集 |
Features / 功能
| Feature | EN | CN |
|---|---|---|
| Excel input | Excel file support | Excel文件输入 |
| JSONL output | JSONL output | JSONL格式输出 |
| Multi-tool support | Multi-tool support | 支持多种工具 |
| Customizable prompt | Customizable prompt | 可自定义提示词 |
Usage / 使用
from data_generator import Generator# Simple / 简单
gen = Generator()
result = gen.generate(
tool_name="dev_control",
commands=["打开空调", "关闭窗帘"],
excel_file="data.xlsx"
)
# With prompt / 自定义提示词
result = gen.generate(
tool_name="alarm_remind",
commands=["提醒我起床"],
prompt_template="自定义提示词模板"
)
Parameters / 参数
| Parameter | Type | EN | CN |
|---|---|---|---|
| tool_name | str | Tool name | 工具名称 |
| commands | list | Command list | 命令列表 |
| excel_file | str | Excel file path | Excel文件路径 |
| prompt_template | str | Custom prompt | 自定义提示词(可选) |
Output / 输出
{"conversations": [...], "system": "..."}
{"conversations": [...], "system": "..."}
Installation / 安装
npx clawhub install data-generator-waai
Author / 作者
- WaaiOn
数据来源：ClawHub ↗ · 中文优化：龙虾技能库
OpenClaw 技能定制 / 插件定制 / 私有工作流定制
免费技能或插件可能存在安全风险，如需更匹配、更安全的方案，建议联系付费定制