Ready to supercharge your AI agents?

Install any skill in seconds. Free to start, no credit card required.

Cc Streaming Export Safety · doccker | DecimalAI

codingby doccker

Cc Streaming Export Safety

doccker/cc-streaming-export-safety

Source doccker/cc-use-exp ↗License NOASSERTION

当实现用户驱动的大文件导出或批量序列化（Excel/CSV/JSON/JSONL/PDF，数据量未知或超过 1 万行/10 MB）时触发；普通小文件下载、静态资源下载、非导出 Writer/Report 类不触发。防止 OOM、临时文件残留、同步导出阻塞 HTTP 线程和表格公式注入。

SkillScore95Maintained

Automatic

Coding pack

Last verified 8/14/2026

What it changes

Passed 21 of 22 test cases with the skill, and 17 of 22 without it.

Without skill77%

With skill95%

Checks it passed that the model alone missed

Requires invoking finish() on ExcelWriter inside a finally block.
Recommends JSONL (Line-delimited JSON) as a streamable alternative format.
Mentions escaping text fields starting with formula characters such as '='.

and 4 more in the full report

4 fixed17 passed either way1 still failing0 broke

Pass-rate lift: +18 pp
Tokens: +113%
Agent turns: 0%
Response time: -11%

Model gemini-3.6-flashMeasured 8/14/2026v121 of 22 cases passed with skill

Tokens, turns and time describe resource use, not a dollar price.

Use this skill

Save it into your project's skills folder. Claude Code picks it up in its next session.

curl -fsSL --create-dirs -o .claude/skills/doccker-cc-streaming-export-safety/SKILL.md https://app.decimal.ai/s/doccker-cc-streaming-export-safety/SKILL.md

Want it pinned and updatable? pip install "decimalai>=0.15", then decimalai skills add doccker-cc-streaming-export-safety, and start Claude Code with claude --plugin-dir "$(git rev-parse --show-toplevel)/.agents"

1 · One-time — install the CLI (docs ↗)

pip install "decimalai>=0.15"

2 · Get the skill — writes .agents/skills/doccker-cc-streaming-export-safety/ and pins it in .decimal/skills.lock

decimalai skills add doccker-cc-streaming-export-safety

No CLI? Get the same file — curl · raw file

curl -fsSL --create-dirs -o .claude/skills/doccker-cc-streaming-export-safety/SKILL.md https://app.decimal.ai/s/doccker-cc-streaming-export-safety/SKILL.md

Raw file: /s/doccker-cc-streaming-export-safety/SKILL.md ↗ · machine-readable summary at /s/doccker-cc-streaming-export-safety.json ↗

Safety checks: 3 of 3 passed

Code scan CleanIntent PassedContent Clean

See it in action

One of 4 test cases the skill fixed. Same model, same prompt, with and without the skill.

1 of 4

Prompt

我们系统里的订单导出功能最近频繁报 OOM 错误。后台代码是用 Java 的 XSSFWorkbook 一次性加载几万条数据库记录并构建 Excel 文件的，前端直接通过 HTTP 请求等待下载。请帮我审查代码逻辑并提供改写方案，要求调整为内存安全的导出方式，处理好临时资源回收，并按照后台异步任务机制重新设计接口交互。

What was checked, without and with the skill
Checked	Without skill	With skill
Recommends replacing XSSFWorkbook with SXSSF for streaming Excel generation.	Missed	Passed
Requires explicitly invoking dispose() on the SXSSF workbook inside a finally block.	Missed	Passed
Mentions escaping text fields starting with formula characters such as '='.	Missed	Passed

case-01 · gemini-3.6-flash · 8/14/2026 · answers are capped and redacted

What's inside

The instructions your model reads when the skill loads.

SKILL.md370 lines2 files

流式导出 / 大对象内存安全

当一次性 in-memory 构建数据超过 1 万行 / 10 MB，或数据量由用户筛选决定且无法预估上限时，必须切换为流式 / 分页 API。否则常见后果：OOM、Full GC 风暴、临时文件残留、HTTP 超时。

触发边界

适用：

用户驱动的全量导出、报表下载、备份导出、批量序列化
Excel / CSV / JSON / JSONL / PDF 文件可能超过 1 万行或 10 MB
代码里出现 SXSSFWorkbook、XSSFWorkbook、EasyExcel、openpyxl、excelize、ExcelJS、PDFKit、ReportLab、JsonGenerator 等导出库

不适用：

固定小文件下载、静态资源下载、头像/附件转发
普通 Writer / Report / Download 命名但不涉及大数据导出
单条 JSON 响应或常规分页接口

决策：什么时候必须流式？

数据量级	推荐模式	备注
≤ 1 万行 / ≤ 5 MB	内存构建 OK	XSSFWorkbook / pandas / 普通 JSON 序列化
1 万 ~ 10 万行	强烈建议流式	单机够用，但有 OOM 风险
> 10 万行 / > 50 MB	必须流式 + 异步	内存模型会爆
数据量未知（用户驱动）	必须流式 + 上限保护	永远按最坏情况设计

核心判断：能不能预估上限？预估超过 1 万行就上流式。

陷阱 #1：Excel 大数据 → XSSFWorkbook 全量加载 OOM

嗅探信号

Track record

Benchmark

21 / 22

test cases passed, vs 17 / 22 without

Adoption

Users: 0
Times used: 0

Safety and source details

SkillSafety

✓ 3 of 3 passed

Code scan15 of 15 checks clean

0 critical · 0 warning · 0 info — scanner v4 — 8/3/2026

View 15 scanner checks

live_secretremote_code_executionreverse_shelldata_exfiltrationssrf_metadataagent_snoopinganti_refusaldestructive_commandsobfuscated_unicodeunicode_homoglyphopaque_blobsuspicious_urltool_overreachtrigger_abuseprompt_injection_phrasing

IntentSafe

LLM judge · does the skill do what it claims

ContentClean

LLM judge · policy & harmful-content review

Source

Imported

doccker / cc-use-exp

.codex/skills/cc-streaming-export-safety/SKILL.md

View on GitHub ↗

License NOASSERTIONImported 8/3/2026Version v1Bundled 1 file

Other skills for the same job

Published skills whose descriptions closely match this one, with their headline benchmark lift.

doccker/streaming-export-safety当代码涉及 Excel/CSV/JSON/PDF 大文件导出、批量序列化、内存里构建大对象时触发。防止 OOM、临时文件残留、同步导出阻塞 HTTP 线程等内存安全陷阱。Close match+14 pp pass-rate lift

More skills from the same source and nearby in the registry, with their headline benchmark lift.