跳到主要内容
知仓学习社ZHICANG

kaggle-research

Use when a research task needs reproducible Kaggle discovery, metadata inspection, bounded public-data downloads, competition or kernel discovery, m…

读凭据执行命令读文件联网严重 0 · 高危 4brycewang-stanford/Auto-Empirical-Research-Skills

它会碰到什么

扫了多少25 个文本文件,83 KB
它会碰到什么读凭据执行命令读文件联网
命中总数7 处
命中统计严重 0 · 高 4 · 中 1 · 低 2
逐条看命中(4 条严重或高危)
  • scripts/kaggle_research.py:112cred-envread
    environment_python = os.environ.get("AERS_KAGGLE_PYTHON")
  • scripts/kaggle_research.py:115cred-envread
    environment_executable = os.environ.get("AERS_KAGGLE_EXECUTABLE")
  • scripts/kaggle_runtime/runner.py:97exec-spawn
    self.process_adapter = process_adapter or subprocess.run
  • tests/test_live_readonly.py:15cred-envread
    os.environ.get("AERS_KAGGLE_LIVE") == "1",

这一栏是扫描器报的事实,不是结论。命中多不等于有毒(安全工具、规则库、示例脚本本来就会包含危险写法),命中少也不等于干净。它和你手上的凭据、文件、网络有什么关系,需要你自己看。

技能内容

Kaggle Research

Use the official Kaggle CLI through the policy-enforcing wrapper in this skill.

The wrapper records bounded, redacted audit data; confines downloads to an

approved directory; and blocks remote mutation unless the user explicitly

authorizes it.

Required workflow

  1. Confirm the requested Kaggle resource and whether the action is read,

download, write, or delete. Do not broaden user authority.

  1. Use an isolated Python 3.11+ environment with kaggle>=2.2,<3.
  2. Configure Kaggle authentication outside commands and source files. Never

read, print, echo, log, or commit credential values.

  1. Run the non-mutating prerequisite check:
   python scripts/kaggle_research.py doctor --json
  1. Run discovery commands before downloads or mutations. Keep every download

under an explicitly chosen output root.

  1. Preserve generated audit JSON and artifact hashes with the research outputs.
  2. Report exact commands, resource references, timestamps, failures, and

generated artifacts. Distinguish verified observations from assumptions.

Safe command execution

Pass Kaggle arguments after -- so their order is preserved:

python scripts/kaggle_research.py run --audit artifacts/audit.json -- datasets list -s iris -v
python scripts/kaggle_research.py run --output-root artifacts/kaggle -- datasets download -d owner/dataset

Preview any potentially mutating command first:

python scripts/kaggle_research.py run --dry-run --allow-write -- datasets create -p dataset-package

An actual remote write additionally requires explicit user authorization and

--allow-write. A delete additionally requires --allow-delete and

--confirm-resource matching the exact resource classified by the wrapper.

The runtime never retries writes or deletes.

Real read-only verification

The live smoke workflow calls Kaggle's real service, inspects all supported

resource groups, downloads a small public dataset, and verifies its hash:

python scripts/kaggle_research.py smoke-readonly --output-root artifacts/kaggle-smoke --report artifacts/kaggle-smoke-report.json

The corresponding integration test is opt-in so normal unit tests do not

depend on network access:

AERS_KAGGLE_LIVE=1 python -m unittest discover -s tests -p "test_live_readonly.py" -v

Only run the live lane when credentials are already available in the process

environment. It must remain read/download-only.

Reference routing

  • Authentication and credential boundaries:

[references/authentication.md](references/authentication.md)

  • Dataset discovery and bounded downloads:

[references/datasets.md](references/datasets.md)

  • Competition discovery and approved submissions:

[references/competitions.md](references/competitions.md)

  • Kernel/notebook discovery and approved pushes:

[references/kernels.md](references/kernels.md)

  • Model discovery and approved instance operations:

[references/models.md](references/models.md)

  • Test lanes, safety policy, and audit artifacts:

[references/testing-and-safety.md](references/testing-and-safety.md)

Read only the reference page required for the active task.

想直接用这个技能?

本站把开放许可(MIT / Apache 等)的技能按仓库打包整理到网盘,点一下转存到你自己的网盘,不用一个个从 GitHub 拉。许可未声明的技能只给原始仓库链接,不打包。