NocoDB Skiils

Access and manage NocoDB databases via v3 REST API. Use for managing workspaces, bases, tables, fields, views, records, and more. Supports filtering, sorting...

This skill appears to be what it says: a command-line wrapper for the NocoDB v3 API that needs an API token and the API URL. Before installing or running: (1) confirm you provide a valid NocoDB API token (NOCODB_TOKEN) and set NOCODB_URL to the correct instance — the script will send data to that URL (default: https://app.nocodb.com); (2) ensure curl and jq are installed; (3) review the provided scripts if you plan to run them, especially upload commands which read local files; (4) note the metadata lists NOCODB_VERBOSE as required but the script treats it as optional — you do not need to supply it. If you do not trust the configured NC_URL, do not install or use the skill.

Type: OpenClaw Skill Name: nocodb-official Version: 0.0.2 The OpenClaw AgentSkills skill bundle for NocoDB is classified as benign. The `scripts/nocodb.sh` script demonstrates robust security practices, including extensive input validation for JSON payloads, integers, file paths, and URL query parameters. It uses `jq --arg` for safe processing of user-provided names and a custom `_enc` function for URL encoding, effectively preventing shell and URL injection vulnerabilities. All network requests are directed to the configured `NOCODB_URL` (defaulting to `app.nocodb.com`) using the `NOCODB_TOKEN`, with no evidence of data exfiltration to unauthorized endpoints or attempts to establish persistence. The `SKILL.md` and `README.md` files contain legitimate instructions for using the NocoDB API and installing the skill, without any malicious prompt injection attempts against the AI agent.