Powerdrill Data Analysis

This skill should be used when the user wants to analyze, explore, visualize, or query data using Powerdrill. Covers listing, creating, and deleting datasets; uploading local files as data sources; creating analysis sessions; running natural-language data analysis queries; and retrieving charts, tables, and insights. Triggers on requests like "analyze my data", "query my dataset", "upload this file for analysis", "list my datasets", "create a dataset", "visualize sales trends", "continue my previous analysis", "delete this dataset", or any data exploration task mentioning Powerdrill.

This package implements a Powerdrill client and will upload files you point it at to https://ai.data.cloud/api and perform dataset/session/job operations — that matches its description. Before installing, verify the source and trustworthiness (there's no homepage and owner is unknown). Important specifics: - The code requires POWERDRILL_USER_ID and POWERDRILL_PROJECT_API_KEY, but the skill metadata does not declare those env vars; confirm where you will store/provide the API key and that the publisher is trustworthy. - The client will read local files you specify and upload them to remote upload URLs returned by the API. Do not use it with sensitive or confidential data unless you trust the Powerdrill service and the skill's provenance. - The client will call sys.exit if credentials are missing — this may terminate an agent process unexpectedly. If you still want to proceed: obtain the API key from a trusted source, set the two environment variables before running, and review the full script locally. If provenance is unclear, prefer obtaining an official SDK or using Powerdrill's documented endpoints directly.

Type: OpenClaw Skill Name: powerdrill-skills Version: 0.1.0 The skill bundle is designed for legitimate data analysis via the Powerdrill API. However, the `scripts/powerdrill_client.py` file contains an `upload_local_file` function that can read and upload *any* local file specified by its `file_path` argument to the Powerdrill API (ai.data.cloud). While this functionality is core to the skill's purpose of processing local data, it presents a significant vulnerability. An AI agent using this skill, if subjected to prompt injection, could be instructed to upload sensitive local files (e.g., `/etc/passwd`, `~/.ssh/id_rsa`, API keys) to the external Powerdrill service. This is a high-risk capability that could lead to unauthorized data exfiltration, classifying the skill as suspicious due to this critical vulnerability, even without explicit malicious intent in the skill's own instructions.