SQLBot

Manage SQLBot workspaces, datasources, ask-data flows, and dashboards, including listing and switching workspace or datasource context, asking questions agai...

Before installing: (1) Recognize the mismatch — the registry says no env vars, but the skill and its SKILL.md require SQLBOT_BASE_URL, SQLBOT_API_KEY_ACCESS_KEY, and SQLBOT_API_KEY_SECRET_KEY. Do not provide production/privileged API keys until you've inspected and tested. (2) Review sqlbot_skills.py source yourself (it is bundled) to confirm how it reads .env and where it writes the state file; explicitly set SQLBOT_STATE_FILE to a location you control if needed. (3) Exports use Playwright: the browser will load the SQLBot frontend preview and the script will attach authentication headers — be aware that rendering the page may cause third-party resources to be fetched; use a safe/test environment when trying exports. (4) Prefer testing against a local or staging SQLBot instance and short-lived API credentials. (5) Ask the publisher to update registry metadata to declare the required env vars and document exact .env lookup behavior (skill dir vs current dir). If you cannot verify these details, treat the skill as risky and avoid supplying sensitive keys.

Type: OpenClaw Skill Name: sqlboot Version: 1.0.0 The skill bundle is a legitimate integration for the SQLBot API, allowing users to manage workspaces, datasources, and dashboards. The core logic in `sqlbot_skills.py` implements standard API client patterns, including JWT-based authentication (HMAC-SHA256) and automated dashboard exports using Playwright. The instructions in `SKILL.md` are transparent and align with the script's functionality, and no evidence of data exfiltration, malicious execution, or prompt injection was found.