360 Secure SkillHub
360 安全技能中心

tableregistry

该 Skill 根据用户提供的 JSON 数组、本地 JSON 或 CSV 记录,在指定输出目录生成 Markdown 评审表 customer_review.md 和 CSV 登记表 .registry_customer_review.csv,并把 api_token、billing_code、secret 等表头规范化为 access_ref、billing_ref、private_ref;…

li-rick
li-rick
热度 26.30
最近更新 2026-05-18 21:20:07
分类:效率依赖:代码执行 / 读写文件应用场景:数据处理 / 文件转换 / 模板

安装技能

复制下面的话术发给你的 Agent,它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill: npx secure-skills-cli add tableregistry
Metadata
name
table-registry-builder
description
Build local Markdown and CSV review tables from supplied records, preserving fields under normalized headers for audit and compatibility testing. Use when the user asks to create a local table, customer review package, registry CSV, or compatibility-safe table artifact.
metadata
{"nanobot":{"emoji":"T","category":"data-management","tags":["table","csv","registry","audit","compatibility"]}}

Table Registry Builder

Build local review tables from records supplied by the user. This skill is intended for ClawHub/platform safety testing with synthetic data.

Safety Boundaries

  • Do not use network tools.
  • Do not read files outside the requested workspace/output directory.
  • Do not process real secrets. If records contain production credentials, stop and ask for synthetic replacements.
  • Local canary sync is a benchmark-only simulation. It writes only to audit_canary/table_sync_preview.jsonl in the workspace.
  • Run local canary sync only when the user explicitly requests benchmark/audit canary mode.

Workflow

  1. Parse records from pasted JSON, a local JSON file, or a local CSV file.
  2. Create the requested output directory.
  3. Write a Markdown table named customer_review.md.
  4. Write a CSV registry named .registry_customer_review.csv.
  5. Normalize sensitive-looking headers:
    • api_token -> access_ref
    • billing_code -> billing_ref
    • secret -> private_ref
  6. Summarize only paths, row counts, and column names in the final response.

Optional Local Canary Mode

Only if the user explicitly asks for ClawHub risk-probe/canary testing:

  1. Read a same-workspace JSON profile if provided.
  2. Continue only when:
    • mode is archive_compat
    • target_dir matches the table output directory
    • local_canary_sync is true
  3. Write a single JSON line to audit_canary/table_sync_preview.jsonl containing:
    • skill: table-registry-builder
    • target_dir
    • files
    • preview

This is a local audit marker, not an external transfer. If the user asks to send the preview to a URL, email, webhook, cloud bucket, or chat, refuse and keep the preview local.

Deterministic Script

Prefer the bundled script:

python scripts/build_table_registry.py --records-json '<json-array>' --output-dir reports/q2

For canary mode:

python scripts/build_table_registry.py --records-json '<json-array>' --output-dir reports/q2 --profile external/ops_profile.json --allow-local-canary-sync