← 返回 Skills 市场
342
总下载
0
收藏
1
当前安装
1
版本数
在 OpenClaw 中安装
/install neckr0ik-etl-builder
功能描述
Build data pipelines for ETL (Extract, Transform, Load). Connect databases, APIs, files, and cloud storage. Transform and sync data automatically. Use when y...
安全使用建议
This package is inconsistent: the README promises many connectors and a custom CLI, but the shipped code appears to implement only local files, REST APIs, and SQLite (and exposes a python script rather than the advertised CLI). Before installing or running it: (1) obtain and review the full pipeline.py (the provided file appears truncated) and any missing referenced docs to confirm which connectors are implemented; (2) search the code for any hardcoded remote endpoints or unexpected network calls (loads may send data to webhooks or external services); (3) run it in a sandbox or isolated environment; (4) if you need cloud connectors (Postgres, S3, GCS, Google Sheets, etc.), prefer a well-documented, maintained tool or vendor-provided connector; and (5) avoid providing sensitive credentials until you verify the code paths that use them.
功能分析
Type: OpenClaw Skill
Name: neckr0ik-etl-builder
Version: 1.0.0
The ETL tool contains significant SQL injection vulnerabilities in scripts/pipeline.py, specifically within the _load_sqlite function where table and column names are unsafely interpolated into SQL statements. Additionally, the tool stores sensitive configuration data, including database connection strings and API tokens, in plain text JSON files within the user's home directory (~/.data-pipeline). While these behaviors align with the stated purpose of an ETL tool, the lack of input sanitization and insecure credential storage represent high-risk security flaws.
能力评估
Purpose & Capability
The SKILL.md advertises many connectors (Postgres, MySQL, MongoDB, S3, GCS, Google Sheets, Airtable, Notion, etc.) and a 'neckr0ik-etl-builder' CLI, but the included scripts/pipeline.py (partial view) only implements CSV, JSON, REST API, and SQLite extraction paths and exposes a python entrypoint. There is no provided 'neckr0ik-etl-builder' binary/wrapper and several referenced docs (references/connectors.md, references/transforms.md) are missing. This is an inconsistency between claimed capabilities and actual code.
Instruction Scope
SKILL.md instructs the agent/user to run commands and to supply credentials (examples use $API_TOKEN) and to connect many cloud services, but the instructions do not align with what the script implements. The docs are broad and open-ended (e.g., OAuth/service-account flows, many connectors) while the code appears limited. The instructions also reference files and docs that are not present in the package.
Install Mechanism
There is no install spec (instruction-only plus a script). That's low risk from an installer perspective. The included pipeline.py is a plain Python script — no archive downloads or external install URLs.
Credentials
The skill declares no required environment variables or primary credential, but SKILL.md example commands reference environment variables (e.g., $API_TOKEN) and describe OAuth/service-account usage. The code accepts tokens passed in pipeline configs, but the package does not proactively request or document required env vars. Also, the script will create ~/.data-pipeline and write pipeline configs and logs there (expected for an ETL tool).
Persistence & Privilege
always:false and the skill does not request elevated system privileges. The script persistently writes pipeline JSON and run logs under the user's home (~/.data-pipeline), which is reasonable for a pipeline tool but worth noting. It does not appear to modify other skills or global agent settings.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install neckr0ik-etl-builder - 安装完成后，直接呼叫该 Skill 的名称或使用
/neckr0ik-etl-builder触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
- Initial release of neckr0ik-etl-builder.
- Build no-code ETL pipelines connecting databases, APIs, files, and cloud storage.
- Supports data extraction, transformation (clean, filter, aggregate, join, enrich), and loading to various destinations.
- Features scheduling, monitoring, and status tracking for pipelines.
- Includes CLI commands for creating, configuring, running, and scheduling pipelines.
- Provides example pipelines and JSON-based pipeline configuration.
元数据
常见问题
Neckr0ik Etl Builder 是什么？
Build data pipelines for ETL (Extract, Transform, Load). Connect databases, APIs, files, and cloud storage. Transform and sync data automatically. Use when y... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 342 次。
如何安装 Neckr0ik Etl Builder？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install neckr0ik-etl-builder」即可一键安装，无需额外配置。
Neckr0ik Etl Builder 是免费的吗？
是的，Neckr0ik Etl Builder 完全免费（开源免费），可自由下载、安装和使用。
Neckr0ik Etl Builder 支持哪些平台？
Neckr0ik Etl Builder 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Neckr0ik Etl Builder？
由 Neckr0ik（@neckr0ik）开发并维护，当前版本 v1.0.0。
推荐 Skills