读取 CSV 并输出字段类型、空值率、唯一值计数。

Do not assume this skill implements CSV profiling: the included main.py only reports input size and exposes CLI flags to fetch URLs or POST payload files. Before installing or running: (1) inspect or run the script locally on non-sensitive sample files to see its behavior; (2) avoid passing --url, --endpoint, or --payload unless you trust the remote host; (3) if you need true CSV profiling, either implement/replace the profiling logic in main.py or ask the publisher for a correct implementation; (4) prefer running in an isolated environment (no network) until you’re confident the tool does what it claims. If you plan to allow autonomous agent use, be especially cautious because the network-capable flags could be invoked to exfiltrate data.

Type: OpenClaw Skill Name: csv-profile-stepper Version: 1.0.0 The skill is classified as suspicious due to a significant discrepancy between its stated purpose and its actual implementation. While SKILL.md describes a CSV profiling tool, main.py contains no CSV processing logic and instead implements arbitrary HTTP GET and POST capabilities via the --url and --endpoint/--payload arguments. This provides a functional mechanism for data exfiltration or unauthorized network requests that are entirely unrelated to the tool's documented function.