← 返回 Skills 市场
Data Model Designer
作者
datadrivenconstruction
· GitHub ↗
· v2.1.0
5882
总下载
0
收藏
0
当前安装
2
版本数
在 OpenClaw 中安装
/install data-model-designer
功能描述
Design data models for construction projects. Create entity-relationship diagrams, define schemas, and generate database structures.
安全使用建议
Install only if you are comfortable granting file access for project data workflows. Treat generated SQL as draft output: validate table, column, and relationship names, review it manually, and run it only in an appropriate database environment with limited privileges.
功能分析
Type: OpenClaw Skill
Name: data-model-designer
Version: 2.1.0
The skill is classified as suspicious primarily due to a significant SQL injection vulnerability in the `generate_sql_schema` method within `SKILL.md`. Entity and field names, which can be user-controlled inputs, are directly concatenated into SQL DDL statements without sanitization, posing a risk for arbitrary SQL execution. Additionally, the `claw.json` grants broad `filesystem` permissions, which, while potentially justified for export functionality, amplifies the risk when combined with the SQL injection vulnerability. Although `instructions.md` advises the agent to 'Validate inputs before processing,' the underlying skill code itself does not implement this validation, making it inherently vulnerable.
能力评估
Credentials
Filesystem permission is disclosed and fits CSV/Excel/JSON file workflows, though users should provide only intended project files and review exports.
Install Mechanism
The package contains markdown/json artifacts only, declares instructions.md as the entry point, requires python3, and has no bundled executable scripts, remote payload retrieval, or dependency installation steps.
Instruction Scope
The instructions broaden slightly into reports, analytics, file inputs, and exports, but this is user-directed and adjacent to construction data processing rather than hidden or unrelated behavior.
Persistence & Privilege
No persistence, background execution, privilege escalation, credential access, memory writes, or automatic database execution is present in the inspected artifacts.
Purpose & Capability
The artifacts consistently describe construction data model design, schema generation, ER diagrams, validation, and related structured reporting using user-provided project data.
如何使用
- 确保已安装 OpenClaw(本地或 Docker 部署)
- 在对话框中输入安装命令:
/install data-model-designer - 安装完成后,直接呼叫该 Skill 的名称或使用
/data-model-designer触发 - 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v2.1.0
- Added detailed business case and technical documentation to SKILL.md.
- Included Python class definitions, enums, and methods for systematic data model design, schema generation, ER diagrams, and validation.
- Expanded skill description and metadata for clarity and compatibility.
v1.0.0
Initial release of Data Model Designer.
- Design data models for construction projects with entities and relationships.
- Generate SQL schemas, JSON schemas, and Mermaid entity-relationship diagrams.
- Includes validation for primary keys and relationships.
- Supports multiple data types, field constraints, and schema exports.
元数据
常见问题
Data Model Designer 是什么?
Design data models for construction projects. Create entity-relationship diagrams, define schemas, and generate database structures. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 5882 次。
如何安装 Data Model Designer?
在 OpenClaw 或 Claude Code 对话框中运行命令「/install data-model-designer」即可一键安装,无需额外配置。
Data Model Designer 是免费的吗?
是的,Data Model Designer 完全免费(开源免费),可自由下载、安装和使用。
Data Model Designer 支持哪些平台?
Data Model Designer 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(darwin, linux, win32)。
谁开发了 Data Model Designer?
由 datadrivenconstruction(@datadrivenconstruction)开发并维护,当前版本 v2.1.0。
推荐 Skills