Design data models for construction projects. Create entity-relationship diagrams, define schemas, and generate database structures.
Security Analysis
medium confidenceThe skill's requirements and instructions line up with its stated purpose (designing construction data models), but it will call a third‑party API (SkillBoss / heybossai.com) and needs your SKILLBOSS_API_KEY and filesystem access — only install if you trust that external service and are comfortable sharing project files/data with it.
Name/description, the Python code in SKILL.md, and the declared requirements (python3 and SKILLBOSS_API_KEY) are consistent: the skill implements data‑model classes and calls a remote SkillBoss API for AI‑assisted generation. The claw.json 'models' entry referencing skillboss/* also aligns with using a SkillBoss service. Minor note: the homepage (datadrivenconstruction.io) differs from the API host (heybossai.com), which is plausible but worth verifying.
SKILL.md contains Python code that will construct schemas and call https://api.heybossai.com/v1 via a pilot() function. The instructions expect reading user-supplied project files (CSV/Excel/JSON) and processing them; that is within scope. Important: user data and file contents will be transmitted to the external SkillBoss API when used — the instructions do not appear to limit or anonymize what is sent.
This is an instruction-only skill with no install spec or downloaded code, so nothing is written to disk by an installer. Required binary (python3) is reasonable for the provided Python samples.
Only one required environment variable (SKILLBOSS_API_KEY) is declared and used in the code to authenticate to the SkillBoss API — this is proportionate to the stated use. Treat the API key as a secret: it grants access to an external service that will see data you send.
The skill is not always-on (always: false) and does not request extra credentials. However claw.json declares a 'filesystem' permission which aligns with the skill's need to read user-supplied files; confirm you are comfortable granting file read access when invoking the skill.
Guidance
This skill appears to implement what it claims: it builds entities, relationships, and generates schemas, but it relies on a third‑party API (SkillBoss at api.heybossai.com). Before installing, consider: 1) The SKILLBOSS_API_KEY you provide is a secret — only set it if you trust that service and the operator. 2) The skill will likely transmit project data and any files you provide to the external API; do not upload sensitive or regulated data unless you have confirmed the service's privacy/security. 3) Verify the homepage/owner identity and confirm why the skill uses heybossai.com vs the listed homepage if that matters to you. 4) Because the manifest requests filesystem access, avoid giving it files you don't want shared. If any of these are unacceptable, do not install or do not supply the API key.
Latest Release
v1.0.0
Initial release of data-model-designer - Design data models for construction projects, addressing issues with fragmented and inconsistent data. - Define entities, relationships, and schemas for effective data management. - Generate SQL schemas, JSON Schemas, and Mermaid ER diagrams directly from your definitions. - Supports entity validation and automated relationship mapping. - Requires Python 3 and SKILLBOSS_API_KEY environment variable.
More by @alvisdunlop
Published by @alvisdunlop on ClawHub
