Sheetsmith

Pandas-powered CSV & Excel management for quick previews, summaries, filtering, transforming, and format conversions. Use this skill whenever you need to inspect spreadsheet files, compute column-level summaries, apply queries or expressions, or export cleansed data to a new CSV/TSV/XLSX output without rewriting pandas every time.

This skill appears to do what it says: inspect and modify spreadsheet files using pandas. Before installing/using it: - Review and run the included tests locally to confirm behavior in your environment. - Be cautious when using --query or --expr: these accept pandas expressions and are evaluated (engine='python'), so do not execute expressions from untrusted sources. Preview results before writing and prefer --output (write a copy) instead of --inplace until you're confident. - The README mentions agent behaviors like sending files via Telegram/WhatsApp and updating memory; these are not implemented in the script — treat those as documentation-level suggestions, not automatic behavior of the code. - Verify dependencies (pandas, openpyxl, xlrd, tabulate) are installed in your environment. If you need higher assurance, review the script source (scripts/sheetsmith.py) yourself — it is small and self-contained with no network calls or hidden endpoints.

Type: OpenClaw Skill Name: Developer: Version: Description: OpenClaw Agent Skill Suspicious High-Entropy/Eval files: 1 The OpenClaw Sheetsmith skill is designed for pandas-powered CSV and Excel file management. The core script `scripts/sheetsmith.py` uses standard pandas functions like `df.query()` and `df.eval()` for data manipulation, which are designed to operate within a safe, restricted context, preventing arbitrary code execution. File operations are limited to reading specified input files and writing output files to user-defined paths. The `SKILL.md` and `README.md` files provide clear instructions for the AI agent on how to use the tool and share its processed output (e.g., via Telegram or WhatsApp), which is a legitimate function of an agent and not an attempt at unauthorized data exfiltration. There is no evidence of intentional harmful behavior, obfuscation, or malicious execution beyond the stated purpose.