← 返回 Skills 市场
380
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install store-order-query
功能描述
query store order information from database
安全使用建议
This skill appears to do exactly what it says: connect to a MySQL database, query orders, and produce an analysis report. Before installing/using it, consider the following: (1) You will be asked to provide database credentials; avoid using root or high-privilege accounts — create a dedicated read-only account limited to the Order and OrderItems tables. (2) The credentials and query results are stored as plain JSON under ~/openclaw-skill-data/store-order-query/ (unencrypted). If that is sensitive in your environment, don't use it or protect that directory. (3) Running the skill requires installing Node dependencies (mysql2) via pnpm/npm — review dependency versions and ensure your environment can install packages safely. (4) If you need additional assurance, review the included dist JS files (they are readable and show no hidden network exfiltration) or run the skill in an isolated environment/container that has restricted network access and a test database.
功能分析
Type: OpenClaw Skill
Name: store-order-query
Version: 1.0.0
The store-order-query skill is a standard database utility designed to fetch and analyze order data from a MySQL instance. It requests database credentials from the user, stores them in a local configuration file (~/openclaw-skill-data/store-order-query/config.json), and generates Markdown reports. While the code uses template literals for SQL identifiers (table/column names) in dist/index.js—a potential vulnerability if the config file were maliciously crafted—the overall logic is transparent, lacks obfuscation, and contains no evidence of data exfiltration or unauthorized remote access.
能力评估
Purpose & Capability
The name/description (query store orders) matches the included code and runtime instructions: the skill reads a local config, connects to MySQL, queries Order and OrderItems tables, saves results, and generates a Markdown report. There are no unrelated environment variables, binaries, or external services requested.
Instruction Scope
SKILL.md stays within scope: it tells the agent to check for ~/openclaw-skill-data/store-order-query/config.json, prompt the user for DB connection details if missing, run node scripts to query and analyze, and present the generated report. Note: it explicitly requires the agent to collect sensitive DB credentials from the user and to write them to a local config.json — this is necessary for the stated function but is sensitive and should be done with caution.
Install Mechanism
There is no automated install spec (instruction-only), but package.json declares a dependency on mysql2 and README/SKILL.md instructs running pnpm install. Installing npm packages from the public registry is expected for Node skills but does carry the usual supply-chain/network risk; no unusual download URLs or extract-from-remote artifacts are present.
Credentials
The skill requests no platform env vars, which is proportional. It does require the user to provide DB credentials (host, port, database, user, password) and stores them in ~/openclaw-skill-data/store-order-query/config.json in plaintext — functional but sensitive. A safer deployment would use a read-only DB account or secrets management rather than storing root/high-privilege credentials in plain JSON.
Persistence & Privilege
The skill does not request always:true and does not modify other skills or global agent config. It writes files under the user's home directory (creates ~/openclaw-skill-data/store-order-query/), which is expected for its purpose but means persistent local storage of queried data and credentials.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install store-order-query - 安装完成后，直接呼叫该 Skill 的名称或使用
/store-order-query触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
Initial release of store-order-query skill.
- Allows querying store order information from a MySQL database.
- Supports flexible queries by time range and analysis dimension (order count, revenue, items, payment methods).
- Includes setup workflow for database configuration.
- Generates analytical reports in Markdown format based on order data.
- Handles error cases for missing configuration, database errors, and empty results.
元数据
常见问题
store-order-query 是什么？
query store order information from database. 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 380 次。
如何安装 store-order-query？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install store-order-query」即可一键安装，无需额外配置。
store-order-query 是免费的吗？
是的，store-order-query 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
store-order-query 支持哪些平台？
store-order-query 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 store-order-query？
由 bondli（@bondli）开发并维护，当前版本 v1.0.0。
推荐 Skills