← 返回 Skills 市场
datadrivenconstruction

Data Model Designer

作者 datadrivenconstruction · GitHub ↗ · v2.1.0
darwinlinuxwin32 ✓ 安全检测通过
5882
总下载
0
收藏
0
当前安装
2
版本数
在 OpenClaw 中安装
/install data-model-designer
功能描述
Design data models for construction projects. Create entity-relationship diagrams, define schemas, and generate database structures.
安全使用建议
Install only if you are comfortable granting file access for project data workflows. Treat generated SQL as draft output: validate table, column, and relationship names, review it manually, and run it only in an appropriate database environment with limited privileges.
功能分析
Type: OpenClaw Skill Name: data-model-designer Version: 2.1.0 The skill is classified as suspicious primarily due to a significant SQL injection vulnerability in the `generate_sql_schema` method within `SKILL.md`. Entity and field names, which can be user-controlled inputs, are directly concatenated into SQL DDL statements without sanitization, posing a risk for arbitrary SQL execution. Additionally, the `claw.json` grants broad `filesystem` permissions, which, while potentially justified for export functionality, amplifies the risk when combined with the SQL injection vulnerability. Although `instructions.md` advises the agent to 'Validate inputs before processing,' the underlying skill code itself does not implement this validation, making it inherently vulnerable.
能力评估
ℹ Credentials
Filesystem permission is disclosed and fits CSV/Excel/JSON file workflows, though users should provide only intended project files and review exports.
✓ Install Mechanism
The package contains markdown/json artifacts only, declares instructions.md as the entry point, requires python3, and has no bundled executable scripts, remote payload retrieval, or dependency installation steps.
ℹ Instruction Scope
The instructions broaden slightly into reports, analytics, file inputs, and exports, but this is user-directed and adjacent to construction data processing rather than hidden or unrelated behavior.
✓ Persistence & Privilege
No persistence, background execution, privilege escalation, credential access, memory writes, or automatic database execution is present in the inspected artifacts.
✓ Purpose & Capability
The artifacts consistently describe construction data model design, schema generation, ER diagrams, validation, and related structured reporting using user-provided project data.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install data-model-designer
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /data-model-designer 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v2.1.0
- Added detailed business case and technical documentation to SKILL.md. - Included Python class definitions, enums, and methods for systematic data model design, schema generation, ER diagrams, and validation. - Expanded skill description and metadata for clarity and compatibility.
v1.0.0
Initial release of Data Model Designer. - Design data models for construction projects with entities and relationships. - Generate SQL schemas, JSON schemas, and Mermaid entity-relationship diagrams. - Includes validation for primary keys and relationships. - Supports multiple data types, field constraints, and schema exports.
元数据
Slug data-model-designer
版本 2.1.0
许可证 —
累计安装 0
当前安装数 0
历史版本数 2
常见问题

Data Model Designer 是什么?

Design data models for construction projects. Create entity-relationship diagrams, define schemas, and generate database structures. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 5882 次。

如何安装 Data Model Designer?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install data-model-designer」即可一键安装,无需额外配置。

Data Model Designer 是免费的吗?

是的,Data Model Designer 完全免费(开源免费),可自由下载、安装和使用。

Data Model Designer 支持哪些平台?

Data Model Designer 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(darwin, linux, win32)。

谁开发了 Data Model Designer?

由 datadrivenconstruction(@datadrivenconstruction)开发并维护,当前版本 v2.1.0。

💬 留言讨论