MySQL Skill - 对话式数据库管理

MySQL 数据库管理技能。通过自然语言查询、管理 MySQL 数据库，支持 SELECT/INSERT/UPDATE/DELETE、表管理、备份恢复等操作。当用户提到 MySQL、数据库查询、建表、数据备份时使用此技能。

This skill is generally coherent with its stated purpose (generating and running MySQL commands), but check a few things before installing: 1) Resolve the packaging/metadata mismatch — the registry summary claims no required binaries while package.json lists mysql/mysqldump and provides install commands; confirm you are comfortable with the client installation. 2) Never put sensitive production credentials into tools without review — prefer a least-privilege DB user, avoid using a root/admin account, and protect ~/.my.cnf (file permissions) if you create it. 3) Understand that the agent can generate and run SQL: require explicit confirmation for destructive write operations or use read-only credentials for routine queries. 4) Verify the source (package.json lists a GitHub repo and homepage); if the origin is unknown/untrusted, inspect the repository or avoid installing. If you need higher assurance, ask the maintainer for clarification or request a signed/official release before use.

Type: OpenClaw Skill Name: mysql-skill Version: 1.0.0 The skill provides the AI agent with broad capabilities to execute shell commands and manage databases using 'mysql' and 'mysqldump' (SKILL.md, package.json). While these functions are aligned with the stated purpose of database management, the inherent risk of allowing an AI to execute arbitrary SQL and shell commands makes it high-risk. The instructions also suggest storing credentials in '~/.my.cnf', which could be targeted for exfiltration if the agent is compromised via prompt injection.