← Back to Skills Marketplace
380
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install store-order-query
Description
query store order information from database
Usage Guidance
This skill appears to do exactly what it says: connect to a MySQL database, query orders, and produce an analysis report. Before installing/using it, consider the following: (1) You will be asked to provide database credentials; avoid using root or high-privilege accounts — create a dedicated read-only account limited to the Order and OrderItems tables. (2) The credentials and query results are stored as plain JSON under ~/openclaw-skill-data/store-order-query/ (unencrypted). If that is sensitive in your environment, don't use it or protect that directory. (3) Running the skill requires installing Node dependencies (mysql2) via pnpm/npm — review dependency versions and ensure your environment can install packages safely. (4) If you need additional assurance, review the included dist JS files (they are readable and show no hidden network exfiltration) or run the skill in an isolated environment/container that has restricted network access and a test database.
Capability Analysis
Type: OpenClaw Skill
Name: store-order-query
Version: 1.0.0
The store-order-query skill is a standard database utility designed to fetch and analyze order data from a MySQL instance. It requests database credentials from the user, stores them in a local configuration file (~/openclaw-skill-data/store-order-query/config.json), and generates Markdown reports. While the code uses template literals for SQL identifiers (table/column names) in dist/index.js—a potential vulnerability if the config file were maliciously crafted—the overall logic is transparent, lacks obfuscation, and contains no evidence of data exfiltration or unauthorized remote access.
Capability Assessment
Purpose & Capability
The name/description (query store orders) matches the included code and runtime instructions: the skill reads a local config, connects to MySQL, queries Order and OrderItems tables, saves results, and generates a Markdown report. There are no unrelated environment variables, binaries, or external services requested.
Instruction Scope
SKILL.md stays within scope: it tells the agent to check for ~/openclaw-skill-data/store-order-query/config.json, prompt the user for DB connection details if missing, run node scripts to query and analyze, and present the generated report. Note: it explicitly requires the agent to collect sensitive DB credentials from the user and to write them to a local config.json — this is necessary for the stated function but is sensitive and should be done with caution.
Install Mechanism
There is no automated install spec (instruction-only), but package.json declares a dependency on mysql2 and README/SKILL.md instructs running pnpm install. Installing npm packages from the public registry is expected for Node skills but does carry the usual supply-chain/network risk; no unusual download URLs or extract-from-remote artifacts are present.
Credentials
The skill requests no platform env vars, which is proportional. It does require the user to provide DB credentials (host, port, database, user, password) and stores them in ~/openclaw-skill-data/store-order-query/config.json in plaintext — functional but sensitive. A safer deployment would use a read-only DB account or secrets management rather than storing root/high-privilege credentials in plain JSON.
Persistence & Privilege
The skill does not request always:true and does not modify other skills or global agent config. It writes files under the user's home directory (creates ~/openclaw-skill-data/store-order-query/), which is expected for its purpose but means persistent local storage of queried data and credentials.
How to Use
- Make sure OpenClaw is installed (local or Docker)
- Run the install command in chat:
/install store-order-query - After installation, invoke the skill by name or use
/store-order-query - Provide required inputs per the skill's parameter spec and get structured output
Version History
v1.0.0
Initial release of store-order-query skill.
- Allows querying store order information from a MySQL database.
- Supports flexible queries by time range and analysis dimension (order count, revenue, items, payment methods).
- Includes setup workflow for database configuration.
- Generates analytical reports in Markdown format based on order data.
- Handles error cases for missing configuration, database errors, and empty results.
Metadata
Frequently Asked Questions
What is store-order-query?
query store order information from database. It is an AI Agent Skill for Claude Code / OpenClaw, with 380 downloads so far.
How do I install store-order-query?
Run "/install store-order-query" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.
Is store-order-query free?
Yes, store-order-query is completely free, licensed under MIT-0. You can download, install and use it at no cost.
Which platforms does store-order-query support?
store-order-query is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).
Who created store-order-query?
It is built and maintained by bondli (@bondli); the current version is v1.0.0.
More Skills