← Back to Skills Marketplace
melvynx

Turso

by Melvyn · GitHub ↗ · v1.0.0 · MIT-0
cross-platform ⚠ suspicious
319
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install turso
Description
Manage Turso SQLite databases via CLI - databases, groups, tokens, replicas. Use when user mentions 'turso', 'libsql', 'sqlite edge', or wants to manage Turs...
Usage Guidance
This instruction-only skill looks functionally correct for managing Turso, but exercise caution before installing or running its commands: - Avoid running curl ... | bash from unknown hosts. Prefer package managers (brew) or verified release binaries (official GitHub releases) and inspect install scripts before executing. - Be careful with auth tokens: do not create or expose non-expiring tokens unless strictly necessary; treat tokens as secrets and store them securely. - Because this skill is instruction-only (no code to audit), the SKILL.md is the only guidance — a malicious installer or accidental exfiltration via token commands is possible. If you plan to use this with an autonomous agent, restrict the agent’s ability to run shell commands and to access secrets, and consider installing the Turso CLI manually on hosts you control before allowing the agent to use the skill. - If you need higher assurance, ask the skill author for a formal install spec (trusted release URLs) or a signed installer and for justification for non-expiring tokens.
Capability Analysis
Type: OpenClaw Skill Name: turso Version: 1.0.0 The skill bundle provides standard documentation and command mappings for the Turso CLI (libSQL). It includes official installation instructions for macOS and Linux/WSL (using the legitimate get.tur.so domain) and lists common administrative commands for managing databases, groups, and authentication tokens. No malicious logic, data exfiltration, or prompt injection attempts were found in SKILL.md or _meta.json.
Capability Assessment
Purpose & Capability
Name/description and the listed commands (db, group, org, plan, tokens) are coherent for a Turso CLI helper. The skill does not request unrelated credentials or config paths in metadata.
Instruction Scope
SKILL.md instructs running installation and authentication commands and obtaining tokens (turso auth login; turso auth token). While these are expected for a CLI helper, the instructions include creating non-expiring tokens and retrieving auth tokens—sensitive operations that an agent could misuse or exfiltrate if given access.
Install Mechanism
Although the frontmatter lists a brew install command, the Linux/WSL install guidance uses curl -sSfL https://get.tur.so/install.sh | bash which downloads and executes a remote script. Piping arbitrary install scripts to a shell is a high-risk pattern (remote arbitrary code execution). The registry metadata had no formal install spec despite the SKILL.md containing installation instructions, which is an inconsistency to note.
Credentials
The skill declares no environment variables or credentials in metadata (proportionate). However, its runtime instructions explicitly direct the user/agent to obtain auth tokens and even create non-expiring tokens—these are sensitive secrets and creation of long-lived tokens increases risk. The skill does not justify why non-expiring tokens would be necessary.
Persistence & Privilege
The skill is not marked always:true and does not request any persistent system-wide privileges in metadata. It is user-invocable only, which limits autonomous persistent presence.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install turso
  3. After installation, invoke the skill by name or use /turso
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release of the Turso skill. - Manage Turso SQLite databases via CLI: create, list, destroy, inspect, and query. - Supports group and organization management through dedicated commands. - Token management and authentication included. - Provides setup instructions for macOS and Linux/WSL. - Always use `--output json` flag for programmatic access where supported.
Metadata
Slug turso
Version 1.0.0
License MIT-0
All-time Installs 0
Active Installs 0
Total Versions 1
Frequently Asked Questions

What is Turso?

Manage Turso SQLite databases via CLI - databases, groups, tokens, replicas. Use when user mentions 'turso', 'libsql', 'sqlite edge', or wants to manage Turs... It is an AI Agent Skill for Claude Code / OpenClaw, with 319 downloads so far.

How do I install Turso?

Run "/install turso" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is Turso free?

Yes, Turso is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does Turso support?

Turso is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created Turso?

It is built and maintained by Melvyn (@melvynx); the current version is v1.0.0.

💬 Comments