← Back to Skills Marketplace
432
Downloads
0
Stars
0
Active Installs
5
Versions
Install in OpenClaw
/install timeplus-sql-guide
Description
Write and execute Timeplus streaming SQL for real-time analytics. Use this skill when the user wants to create streams, run streaming queries, build material...
Usage Guidance
This is largely a coherent instruction-only guide for interacting with a Timeplus server over HTTP and requires only curl plus the Timeplus host/user/password — which is appropriate. Before installing or using it:
- Only provide credentials for a Timeplus instance you trust; the skill will send whatever SQL you run to that host using the provided credentials.
- Watch out for copy-paste pitfalls: several example snippets contain hard-coded credentials (DB passwords, AWS keys, Slack webhook URLs) and an example referencing TIMEPLUS_API_KEY which the skill does not declare. Do not copy those secrets into your environment or production SQL.
- Prefer least-privileged credentials (a user with only the permissions needed) rather than a highly privileged account.
- Be careful when creating Python Table Functions, remote UDFs, or alerts that post to webhooks: those can make outbound network requests and, if misused, could leak data to external endpoints. Review any generated UDF code and webhook URLs before running.
- If you need the management API example that uses TIMEPLUS_API_KEY, add that env var intentionally and treat it as a separate credential.
If you want, I can: (a) extract or rewrite the examples to remove hard-coded secrets and clearly mark where user-supplied secrets belong, or (b) generate safe templates that use placeholder env vars only.
Capability Analysis
Type: OpenClaw Skill
Name: timeplus-sql-guide
Version: 1.0.4
The skill bundle provides the agent with high-risk capabilities, including the ability to execute arbitrary SQL queries via 'curl' and run arbitrary Python code on a Timeplus server through User-Defined Functions (UDFs) and Table Functions. It explicitly documents how to install external Python packages (e.g., 'SYSTEM INSTALL PYTHON PACKAGE') and perform network requests from within the database engine (references/UDFS.md, references/Python_TABLE_FUNCTION.md). While these features are aligned with the stated purpose of managing a Timeplus analytics platform, the combination of shell access, package installation, and arbitrary code execution represents a significant attack surface for remote code execution and data exfiltration if the agent is misdirected.
Capability Assessment
Purpose & Capability
Name/description: write and execute Timeplus streaming SQL. Declared requirements: curl and TIMEPLUS_HOST/TIMEPLUS_USER/TIMEPLUS_PASSWORD. The instructions use curl against port 8123/3218 and these env vars — proportionate and expected for the described functionality.
Instruction Scope
SKILL.md and reference docs instruct the agent to run SQL via curl using the declared env vars and to create streams, UDFs, materialized views, ingest, sinks, etc. That stays within the Timeplus domain. However several examples in the references: (a) show using an undeclared TIMEPLUS_API_KEY header for the management API, and (b) include hard-coded credentials (e.g., example ClickHouse/MySQL/S3 credentials and a Slack webhook URL) which contradict the guide's 'never hardcode credentials' guidance and could encourage copy-paste of secrets. The skill's runtime instructions themselves do not tell the agent to read unrelated system files or extra env vars.
Install Mechanism
Instruction-only skill; no install spec and no code executed locally by the skill bundle. All remote actions are performed by the agent via curl calls to the Timeplus server — lowest install risk from the skill package itself.
Credentials
Declared env vars (TIMEPLUS_HOST, TIMEPLUS_USER, TIMEPLUS_PASSWORD) are appropriate and minimal for connecting to a Timeplus instance. The references include other credential-like variables (TIMEPLUS_API_KEY) and example AWS/CQ/DB passwords inside SQL snippets; those are not declared as required by the skill but are present in examples — this is a potential source of confusion and an insecure pattern if users copy-paste.
Persistence & Privilege
always: false, no install, and no modifications to other skills or global agent config. Autonomous invocation is allowed by default (normal), but the skill does not request elevated or persistent platform privileges.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install timeplus-sql-guide - After installation, invoke the skill by name or use
/timeplus-sql-guide - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.4
- Updated metadata: version set to 1.0.4 and added the `openclaw` requirements section for improved compatibility.
- Expanded environment and binary requirements now explicitly list all necessary environment variables and require `curl`.
- Minor correction in the description text.
- No changes to core usage examples, compatibility, or SQL instructions.
v1.0.3
- Added documentation for Timeplus SQL ALERTs and TASKs, expanding real-time analytics guidance.
- Bumped version to 1.0.3.
- Updated metadata in SKILL.md to reflect the new version.
v1.0.2
- Added metadata specifying required environment variables (TIMEPLUS_HOST, TIMEPLUS_USER, TIMEPLUS_PASSWORD), including descriptions and sensitivity for credentials.
- Updated version number to 1.0.2 in SKILL.md metadata.
- No changes to commands, example usage, or documentation content outside metadata.
v1.0.1
- Environment variable setup instructions now use a bullet-list format instead of a bash code block.
- Fixed formatting in the environment setup section for clarity.
- Added a missing backtick in the "Inspect a stream" error handling section.
- No functional or feature changes; documentation formatting only.
v1.0.0
Initial release of Timeplus SQL Guide.
- Provides reference and examples for writing and executing Timeplus streaming SQL via ClickHouse-compatible HTTP interface.
- Covers creating streams, running streaming/historical queries, materialized views, data ingestion, sinks, and random data simulation.
- Documents environment setup and required ports (8123 for SQL, 3218 for streaming ingest).
- Includes sample curl commands for common patterns: DDL, queries, inserts, windowing, materialized views, and error handling.
- Links to deeper references and official documentation for advanced features.
Metadata
Frequently Asked Questions
What is timeplus-sql-guide?
Write and execute Timeplus streaming SQL for real-time analytics. Use this skill when the user wants to create streams, run streaming queries, build material... It is an AI Agent Skill for Claude Code / OpenClaw, with 432 downloads so far.
How do I install timeplus-sql-guide?
Run "/install timeplus-sql-guide" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is timeplus-sql-guide free?
Yes, timeplus-sql-guide is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does timeplus-sql-guide support?
timeplus-sql-guide is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created timeplus-sql-guide?
It is built and maintained by Gang Tao (@gangtao); the current version is v1.0.4.
More Skills