← Back to Skills Marketplace
spzwin

sq-math

by spzwin · GitHub ↗ · v1.0.1 · MIT-0
cross-platform ⚠ suspicious
100
Downloads
0
Stars
1
Active Installs
2
Versions
Install in OpenClaw
/install sq-math
Description
数学运算技能,支持算术、代数方程、函数求值、微积分与矩阵计算。用于用户提出“帮我算一下”“解方程”“求导/积分”“矩阵运算”等数学任务时,优先通过内置脚本稳定计算并返回结果。
Usage Guidance
This skill appears to do what it claims and has no network/credential access. Before using: (1) be aware that sympy.sympify parses string expressions—if you run untrusted input through it there are parser-related risks in some setups, so prefer to run the skill locally or in an isolated environment; (2) the fallback uses eval with a restricted namespace which mitigates typical eval risks, but avoid feeding untrusted payloads; (3) if you plan to enable full sympy support, ensure sympy is up-to-date and consider running the tool in a sandbox or container if you need stronger isolation.
Capability Analysis
Type: OpenClaw Skill Name: sq-math Version: 1.0.1 The skill bundle contains a math utility in `scripts/math_calc.py` that uses `eval()` and `sympy.sympify()` to process user-provided expressions. These functions are known to be vulnerable to arbitrary code execution (RCE) if the input is not strictly sanitized, as they can be bypassed to execute system commands. While the script's intent appears to be legitimate mathematical calculation, the use of these high-risk functions without a secure sandbox constitutes a significant security vulnerability.
Capability Assessment
Purpose & Capability
Name/description match the included assets: SKILL.md documents running the bundled Python script and the script implements arithmetic, equation solving, differentiation, integration, and matrix determinant. There are no unrelated binaries, env vars, or config paths requested.
Instruction Scope
SKILL.md instructs the agent to run the local script with specific CLI flags (e.g., --expr, --solve). The script only reads its CLI arguments and does not access files, network, or other system state. One caution: the script uses sympy.sympify on user-provided strings (when sympy is available)—parsing arbitrary user input can carry parser-related risks in some environments. The fallback path uses eval but with __builtins__ disabled and a restricted math-only namespace, which reduces risk.
Install Mechanism
No install spec — the skill is instruction-only plus a small local script. Nothing is downloaded or written to disk by an installer.
Credentials
The skill requests no environment variables, no credentials, and no config paths. This is proportionate to a standalone math utility.
Persistence & Privilege
always is false and the skill does not request persistent/system-wide changes. It does not modify other skills or agent settings.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install sq-math
  3. After installation, invoke the skill by name or use /sq-math
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.1
sync update from internal platform
v1.0.0
Initial release: math calculation skill
Metadata
Slug sq-math
Version 1.0.1
License MIT-0
All-time Installs 1
Active Installs 1
Total Versions 2
Frequently Asked Questions

What is sq-math?

数学运算技能,支持算术、代数方程、函数求值、微积分与矩阵计算。用于用户提出“帮我算一下”“解方程”“求导/积分”“矩阵运算”等数学任务时,优先通过内置脚本稳定计算并返回结果。 It is an AI Agent Skill for Claude Code / OpenClaw, with 100 downloads so far.

How do I install sq-math?

Run "/install sq-math" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is sq-math free?

Yes, sq-math is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does sq-math support?

sq-math is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created sq-math?

It is built and maintained by spzwin (@spzwin); the current version is v1.0.1.

💬 Comments