← 返回 Skills 市场
43622283

Li ETL Handle

作者 Terry S Fisher · GitHub ↗ · v1.0.1 · MIT-0
cross-platform ⚠ suspicious
231
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install li-etl-handle
功能描述
Node.js-based Excel automation for reading, writing, cleaning, transforming, merging .xlsx/.xls/.csv files with joins, analysis, flow control, and JS scripti...
使用说明 (SKILL.md)

Li_ETL_handle - ETL 自动化处理技能

🌍 多语言说明 / Multilingual Description

🇨🇳 中文

Excel 自动化处理技能 - 一站式 Excel 数据处理解决方案,支持读取、写入、清洗、转换、合并 Excel 文件。基于 Node.js,无需安装 Excel 即可处理 .xlsx、.xls、.csv 文件。

核心功能

  • 📖 数据读取 - 支持 xlsx/xls/csv 多种格式
  • ✍️ 数据写入 - 创建、追加、格式化输出
  • 🧹 数据清洗 - 去重、删除空行、文本清理
  • 🔄 数据转换 - 格式互转、行列转置、字段处理
  • 🔗 数据合并 - 多文件批量合并
  • 📈 数据分析 - 统计、筛选、排序、分组聚合
  • 🔗 多表连接 - 内连接、左连接、右连接、全外连接
  • 🔄 流程控制 - Switch/Case、If-Else
  • 📝 脚本支持 - JavaScript 自定义处理

作者: 北京老李
版本: 1.0.1
许可: MIT


🇺🇸 English

Excel Automation Skill - All-in-one Excel data processing solution, supporting read, write, clean, transform, and merge Excel files. Based on Node.js, handles .xlsx, .xls, .csv files without Excel installation.

Core Features:

  • 📖 Data Reading - Support xlsx/xls/csv formats
  • ✍️ Data Writing - Create, append, format output
  • 🧹 Data Cleaning - Deduplication, remove empty rows, text cleanup
  • 🔄 Data Transformation - Format conversion, transpose, field processing
  • 🔗 Data Merging - Batch merge multiple files
  • 📈 Data Analysis - Statistics, filtering, sorting, grouping
  • 🔗 Table Joins - Inner, Left, Right, Full Outer joins
  • 🔄 Flow Control - Switch/Case, If-Else
  • 📝 Script Support - JavaScript custom processing

Author: Beijing Lao Li
Version: 1.0.1
License: MIT


🇫🇷 Français

Compétence d'Automatisation Excel - Solution tout-en-un de traitement de données Excel, prenant en charge la lecture, l'écriture, le nettoyage, la transformation et la fusion de fichiers Excel. Basé sur Node.js, gère les fichiers .xlsx, .xls, .csv sans installation d'Excel.

Fonctionnalités Principales:

  • 📖 Lecture de Données - Support des formats xlsx/xls/csv
  • ✍️ Écriture de Données - Création, ajout, formatage de sortie
  • 🧹 Nettoyage de Données - Déduplication, suppression des lignes vides
  • 🔄 Transformation de Données - Conversion, transposition, traitement des champs
  • 🔗 Fusion de Données - Fusion par lots de plusieurs fichiers
  • 📈 Analyse de Données - Statistiques, filtrage, tri, regroupement
  • 🔗 Jointures de Tables - Inner, Left, Right, Full Outer
  • 🔄 Contrôle de Flux - Switch/Case, If-Else
  • 📝 Support de Script - Traitement personnalisé JavaScript

Auteur: Pékin Lao Li
Version: 1.0.1
Licence: MIT


🇩🇪 Deutsch

Excel-Automatisierungsfähigkeit - All-in-One-Excel-Datenverarbeitungslösung, unterstützt Lesen, Schreiben, Bereinigen, Transformieren und Zusammenführen von Excel-Dateien. Basierend auf Node.js, verarbeitet .xlsx, .xls, .csv Dateien ohne Excel-Installation.

Hauptfunktionen:

  • 📖 Datenlesen - Unterstützung für xlsx/xls/csv Formate
  • ✍️ Datenschreiben - Erstellen, Anhängen, Ausgabe formatieren
  • 🧹 Datenbereinigung - Deduplizierung, leere Zeilen entfernen
  • 🔄 Datentransformation - Formatkonvertierung, Transponierung
  • 🔗 Datenzusammenführung - Stapelzusammenführung mehrerer Dateien
  • 📈 Datenanalyse - Statistik, Filterung, Sortierung, Gruppierung
  • 🔗 Tabellenverknüpfungen - Inner, Left, Right, Full Outer Joins
  • 🔄 Flusssteuerung - Switch/Case, If-Else
  • 📝 Skriptunterstützung - Benutzerdefinierte JavaScript-Verarbeitung

Autor: Peking Lao Li
Version: 1.0.1
Lizenz: MIT


🇯🇵 日本語

Excel 自動化スキル - Excel ファイルの読み取り、書き込み、クリーニング、変換、マージをサポートするオールインワンの Excel データ処理ソリューション。Node.js に基づき、Excel のインストールなしで.xlsx、.xls、.csv ファイルを処理できます。

主な機能:

  • 📖 データ読み取り - xlsx/xls/csv 形式をサポート
  • ✍️ データ書き込み - 作成、追加、フォーマット出力
  • 🧹 データクリーニング - 重複削除、空行削除
  • 🔄 データ変換 - 形式変換、転置、フィールド処理
  • 🔗 データマージ - 複数ファイルのバッチマージ
  • 📈 データ分析 - 統計、フィルタリング、並べ替え、グループ化
  • 🔗 テーブル結合 - 内部結合、左結合、右結合、完全外部結合
  • 🔄 フロー制御 - Switch/Case、If-Else
  • 📝 スクリプトサポート - JavaScript カスタム処理

著者: 北京老李
バージョン: 1.0.1
ライセンス: MIT


📚 详细功能 / Detailed Features

1️⃣ 数据读取 (Extract)

  • readExcel() - 读取 Excel 文件
  • readCSV() - 读取 CSV 文件

2️⃣ 数据写入 (Load)

  • writeExcel() - 写入 Excel 文件
  • writeCSV() - 写入 CSV 文件

3️⃣ 数据清洗 (Clean)

  • removeDuplicates() - 去重
  • removeEmptyRows() - 删除空行
  • cleanText() - 文本清理
  • formatData() - 格式标准化
  • replaceNull() - NULL 值替换

4️⃣ 数据转换 (Transform)

  • csvToExcel() - CSV 转 Excel
  • excelToCSV() - Excel 转 CSV
  • transpose() - 行列转置
  • concatFields() - 字段拼接
  • valueMapping() - 值映射
  • splitField() - 字段拆分
  • columnsToRows() - 列转行
  • rowsToColumns() - 行转列

5️⃣ 数据合并 (Merge)

  • mergeExcelFiles() - 多文件合并
  • mergeFolderExcel() - 文件夹批量合并

6️⃣ 数据分析 (Analyze)

  • getStatistics() - 基础统计
  • filterData() - 数据筛选
  • sortData() - 数据排序
  • groupBy() - 分组聚合

7️⃣ 多表连接 (Join)

  • innerJoin() - 内连接
  • leftJoin() - 左连接
  • rightJoin() - 右连接
  • fullOuterJoin() - 全外连接
  • crossJoin() - 交叉连接

8️⃣ 流程控制 (Flow Control)

  • switchCase() - Switch/Case 数据分类
  • ifElse() - If-Else 条件处理

9️⃣ 脚本支持 (Script)

  • executeScript() - JavaScript 脚本执行
  • writeLog() - 写日志调试

🔟 工具函数 (Utils)

  • maskSensitiveData() - 敏感数据脱敏
  • getOutputPath() - 输出路径生成

🚀 使用示例 / Usage Examples

基本使用 / Basic Usage

const excel = require('./index.js');

// 读取 Excel
const { data } = excel.readExcel('./data.xlsx');

// 数据清洗
const cleaned = excel.removeDuplicates(data, 'phone');

// 写入结果
excel.writeExcel(cleaned, './output.xlsx');

多表连接 / Table Join

// 左连接
const result = excel.leftJoin(employees, departments, 'dept', 'dept_name');

流程控制 / Flow Control

// Switch/Case
const classified = excel.switchCase(data, 'dept', {
  'Sales': 'A',
  'Tech': 'B'
}, 'Other');

// If-Else
const leveled = excel.ifElse(
  data,
  row => row.score >= 85,
  row => ({ ...row, level: 'High' }),
  row => ({ ...row, level: 'Low' })
);

⚠️ 安全提示 / Security Notice

  • executeScript 函数允许执行自定义 JavaScript 代码,请确保传入的函数安全可靠
  • 处理未知来源的 Excel 文件时请注意潜在风险,建议在沙箱环境中测试
  • 依赖包安全:xlsx 包存在已知漏洞,建议只处理可信来源的文件

📦 依赖 / Dependencies

  • xlsx@^0.18.5 - Excel 文件处理
  • csv-parser@^3.0.0 - CSV 文件解析
  • csv-stringify@^6.4.0 - CSV 文件生成

📄 许可 / License

MIT License - © 2026 北京老李 (Beijing Lao Li)


📞 联系 / Contact

安全使用建议
This skill appears to do what it says (read/write/clean/transform Excel/CSV) but has a few security caveats you should weigh before installing or allowing autonomous use: - Treat executeScript as dangerous by design: it executes arbitrary JavaScript. Only use this capability with code you trust or run the skill in an isolated sandbox or container. If you don't need script support, avoid calling executeScript or ask the author for a build without it. - Upgrade or replace xlsx: the included package version ([email protected]) has publicly disclosed vulnerabilities. Before processing untrusted files, upgrade to a patched xlsx or switch to another library (e.g., exceljs), and run npm audit. - Verify package sources: package-lock references a non-standard mirror (mirrors.tencentyun.com) over HTTP. When installing, prefer the official npm registry or otherwise confirm the mirror's integrity and use HTTPS. - Limit autonomous invocation: if the agent/platform will call skills autonomously, consider disabling autonomous invocation for this skill (or restricting when it can run) because an autonomous agent could pass scripts to executeScript. - Practical checks before use: review index.js (and any executeScript implementation) yourself, run the tests in an isolated environment, run 'npm audit' and inspect package-lock for unexpected dependencies, and process only trusted Excel files until you upgrade the vulnerable dependency. If you want, I can: (1) point to the exact lines implementing executeScript in index.js, (2) suggest a minimal patch to disable executeScript or sandbox it, or (3) draft a recommended checklist/command sequence to safely run the skill in a container and upgrade xlsx.
功能分析
Type: OpenClaw Skill Name: li-etl-handle Version: 1.0.1 The skill provides a comprehensive ETL toolkit for Excel and CSV processing but includes a high-risk `executeScript` function in `index.js` that allows for arbitrary JavaScript execution on data. It also relies on `[email protected]`, a version with known high-severity vulnerabilities (Prototype Pollution and ReDoS), which the author acknowledges in the included `SECURITY_AUDIT.md` and `SECURITY_FIXES.md`. While the developer is transparent about these risks and provides extensive documentation and testing, the inherent risk of the script execution feature and the vulnerable dependency meet the criteria for a suspicious classification.
能力评估
Purpose & Capability
Name/description match the actual code and files: index.js implements read/write/clean/transform/merge for .xlsx/.xls/.csv and depends on xlsx, csv-parser, csv-stringify — these are coherent and expected for an Excel ETL skill.
Instruction Scope
SKILL.md and the code provide executeScript / JavaScript script support which intentionally allows executing user-provided JS to transform rows. While this is a documented feature of the skill, it grants the skill (and any caller that can invoke it) ability to run arbitrary code in the host process with full filesystem and process access unless you sandbox it. The doc warns about this but does not define a runtime sandbox or limits; that lack of restriction is a security concern.
Install Mechanism
There is no platform install spec (instruction-only), which minimizes automatic installs by the platform. However the package.json/package-lock declare dependencies and package-lock resolves packages from a mirror (mirrors.tencentyun.com) via HTTP; installing these packages would fetch third-party code. The xlsx dependency is a known-vulnerable version according to the included audit notes.
Credentials
The skill declares no required environment variables, credentials, or privileged config paths. The code operates on local files and does not attempt to read environment secrets or external credentials, which is proportionate to an ETL utility.
Persistence & Privilege
always:false (good) but disable-model-invocation:false (default) means the agent may autonomously invoke the skill. Combined with executeScript (arbitrary JS execution) this increases blast radius: an autonomous agent could pass scripts that access files or environment. The skill does not modify other skills or system settings, but the autonomous-call + executeScript combination is a notable risk.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install li-etl-handle
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /li-etl-handle 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.1
- Added comprehensive multilingual documentation (Chinese, English, French, German, Japanese) detailing features, usage, and safety notices. - Expanded feature list with clear breakdowns: data reading, writing, cleaning, transformation, merging, analysis, joining, flow control, scripting, and utility functions. - Included detailed example code snippets for key functionalities. - Provided security guidelines and explicit dependency information. - Added author, license, and contact details for better support and attribution.
元数据
Slug li-etl-handle
版本 1.0.1
许可证 MIT-0
累计安装 0
当前安装数 0
历史版本数 1
常见问题

Li ETL Handle 是什么?

Node.js-based Excel automation for reading, writing, cleaning, transforming, merging .xlsx/.xls/.csv files with joins, analysis, flow control, and JS scripti... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 231 次。

如何安装 Li ETL Handle?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install li-etl-handle」即可一键安装,无需额外配置。

Li ETL Handle 是免费的吗?

是的,Li ETL Handle 完全免费,采用 MIT-0 许可证,可自由下载、安装和使用。

Li ETL Handle 支持哪些平台?

Li ETL Handle 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 Li ETL Handle?

由 Terry S Fisher(@43622283)开发并维护,当前版本 v1.0.1。

💬 留言讨论