datapilot

面向所有问数与数据分析场景，基于 DataPilot 的 OpenAPI 执行从数据源接入到数据问答的完整流程。用于自然语言查数、SQL 查询校验、图表生成、报告导出下载、创建与管理数据分析 Agent、维护 Agent 知识库。

This skill is coherent with its stated purpose (a Node CLI for DataPilot) but the bundled script writes persistent logs and explicitly logs the DATAPILOT_API_KEY value into dataagent_cli.log. Before installing or running: 1) Do not supply a high-privilege/long-lived API key — create a least-privilege key you can rotate. 2) Inspect or modify dataagent_openapi_cli.mjs to remove or sanitize keyenv logging (replace raw key with sanitized value or remove the field). 3) Run the script in an isolated environment (ephemeral container or sandbox) if you must test it, and ensure the logfile is not included in backups or synced locations. 4) Consider deleting or securing dataagent_cli.log after use and rotating the API key if it was exposed. If the author can clarify why the raw API key is logged and remove that behavior, the risk would be substantially reduced.

Type: OpenClaw Skill Name: oceanbase-datapilot Version: 1.0.1 The skill bundle contains significant security vulnerabilities in 'dataagent_openapi_cli.mjs' that could be exploited. Specifically, the script logs the raw 'DATAPILOT_API_KEY' to a local file ('dataagent_cli.log') within the 'getAuthHeaders' function, despite having sanitization logic elsewhere. Furthermore, the 'create-instance' command facilitates arbitrary file reading and uploading via the '--sqlite-file' argument without path validation, potentially allowing an attacker to exfiltrate sensitive system files if the AI agent is manipulated. While these appear to be unintentional design flaws rather than intentional malware, they pose a high risk.