数据处理器 Eval ========== Status: review Score: 60/100 Risk: medium Decision: manual_review Policy: review Reason: Test manually in an isolated workspace and compare against safer alternatives. Install: npx skills add Arterning/DeepParseX --skill 数据处理器 Required checks: - WARN Task fit: Task fit is weak; compare alternatives before selecting. - PASS Install path: Install handoff is available. - PASS Install command safety: standard package or runtime install path - WARN Trust score: Potentially useful, but at least one trust signal needs human inspection. - WARN Audit score: Needs review - WARN Agent safety gate: Sparse or mixed signals. Useful for discovery, but not for autonomous installation. - PASS License clarity: MIT - WARN Permission surface: shell or command execution, filesystem or document access Warnings: - Task fit: Task fit is weak; compare alternatives before selecting. - Trust score: Potentially useful, but at least one trust signal needs human inspection. - Audit score: Needs review - Agent safety gate: Sparse or mixed signals. Useful for discovery, but not for autonomous installation. - README/SKILL.md completeness: Public metadata needs stronger README/SKILL.md context - Permission surface: shell or command execution, filesystem or document access - High-risk permission hints: Shell or command execution - SKILL.md 中技能名称使用中文“数据处理器”,而仓库路径为 data-processor,示例中又出现 data-processor,存在命名不一致。 - 文档中提到 --file 参数仅用于读取技能目录中已存在的文件,但未明确说明脚本是否对路径进行限制,建议补充安全说明。 - 脚本缺少错误处理示例,如输入数据格式错误时的反馈机制。 - Quality score needs review - GitHub adoption: 85 GitHub stars Validation plan: 1. Inspect repository, README/SKILL.md, license, and recent commits before production use. 2. Install in an isolated workspace or sandbox with no production secrets available. 3. Run the smallest representative task and record files touched, commands run, network access, and outputs. 4. Compare the selected skill against at least one alternative when the eval status is review or failed. 5. Promote only after the agent reports a successful verification result and unresolved warnings are accepted. Do not use when: - teams that need a vendor-supported SLA - production agents without a repository review - SKILL.md 中技能名称使用中文“数据处理器”,而仓库路径为 data-processor,示例中又出现 data-processor,存在命名不一致。 - No OpenAgentSkill engagement data yet - High-risk permission hints: Shell or command execution - 文档中提到 --file 参数仅用于读取技能目录中已存在的文件,但未明确说明脚本是否对路径进行限制,建议补充安全说明。 - 脚本缺少错误处理示例,如输入数据格式错误时的反馈机制。 - Quality score needs review URLs: - Skill: https://www.openagentskill.com/skills/arterning- - Audit: https://www.openagentskill.com/skills/arterning-/audit - JSON: https://www.openagentskill.com/api/agent/evals?slug=arterning-