← 返回 Skills 市场
209
总下载
1
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install text-to-sql-query
功能描述
直接通过 Text-to-SQL 方式查询零售数据库。根据用户自然语言描述，生成 SQL 查询语句并执行。 本 Skill 不依赖语义层或指标平台，而是直接基于数据库 schema 生成 SQL。 触发场景：用户需要查询零售数据、生成 SQL 查询、分析销售/客户/商品数据时使用。
安全使用建议
This skill appears to implement a Text-to-SQL proxy to run SELECT queries against a retail database, but there are two issues you should resolve before trusting it: (1) SKILL.md requires an API key named CAN_API_KEY, yet the registry metadata lists no required credentials — ask the publisher to declare CAN_API_KEY (and the minimal scopes/permissions for that key) in the metadata; (2) the provided curl examples use --noproxy '*' which explicitly bypasses system proxies and monitoring — ask the author to remove that and use normal proxy behavior so your network monitoring and egress controls still apply. Additional precautions: only provide a least-privilege API key scoped to allowed tables/columns and environments (prefer non-production for initial testing), confirm who operates https://gateway.can.aloudata.com and their security/retention policies, require row/column-level restrictions if sensitive PII could be present, rotate keys if you test this skill, and prefer using an audited client (not ad-hoc curl) if you must allow the skill. If the publisher cannot confirm the above (credential scope and removal of proxy bypass), treat the skill as untrusted.
功能分析
Type: OpenClaw Skill
Name: text-to-sql-query
Version: 1.0.0
The skill is a well-documented Text-to-SQL tool designed for retail data analysis. It provides clear instructions for an AI agent to generate and execute SQL queries against a specific API gateway (gateway.can.aloudata.com) using an environment-provided API key. The bundle includes comprehensive database schemas, SQL templates, and explicit security constraints such as a table whitelist and a restriction to SELECT-only statements in SKILL.md, with no evidence of malicious intent or unauthorized data access.
能力评估
Purpose & Capability
The name/description (Text-to-SQL for a retail DB) aligns with the runtime instructions (generate SQL and POST to a JDBC query gateway). However the registry metadata lists no required environment variables or primary credential while the SKILL.md explicitly requires an API key ($CAN_API_KEY). That mismatch is an incoherence between claimed requirements and actual instructions.
Instruction Scope
Instructions are explicit about building and sending SQL to https://gateway.can.aloudata.com/api/jdbc/query and enforce SELECT-only and a six-table whitelist — which is consistent with the stated purpose. However the examples recommend curl --noproxy '*' which bypasses system proxies/monitoring (a potential exfiltration/monitoring-evasion risk). The SKILL.md also differentiates 'strong' models that may 'decide implementation details', which can broaden what the skill does at runtime beyond the strict templates.
Install Mechanism
No install spec and no code files (instruction-only). That minimizes on-disk execution risk; nothing is downloaded or written by an installer.
Credentials
The skill requires an API key (CAN_API_KEY) to call the JDBC gateway but the registry metadata declares no required env vars or primary credential — a direct inconsistency. A single service API key is reasonable for this purpose, but it is sensitive because it allows querying database data; the SKILL.md does not enumerate the privilege scope of that key or who operates the gateway. The proxy-bypass recommendation increases risk that data could be exfiltrated outside corporate monitoring.
Persistence & Privilege
always is false and there is no install script or persistent component. The skill does not request permanent presence or attempt to modify other skills or agent-wide configuration.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install text-to-sql-query - 安装完成后，直接呼叫该 Skill 的名称或使用
/text-to-sql-query触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.0
text-to-sql-query 1.0.0
- Initial release of the Text-to-SQL 数据查询 Skill for querying retail databases via natural language.
- Supports automatic SQL generation and execution directly against 6 whitelist tables using provided schema.
- Execution supported via curl or Python, with results returned in Markdown table format.
- Enforces SELECT-only queries, table whitelist, and basic security constraints (e.g., no multi-statement or DML).
- Schema documentation included for all fact and dimension tables.
元数据
常见问题
Aloudata CAN SKILLS - text-to-sql-query 是什么？
直接通过 Text-to-SQL 方式查询零售数据库。根据用户自然语言描述，生成 SQL 查询语句并执行。 本 Skill 不依赖语义层或指标平台，而是直接基于数据库 schema 生成 SQL。 触发场景：用户需要查询零售数据、生成 SQL 查询、分析销售/客户/商品数据时使用。 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 209 次。
如何安装 Aloudata CAN SKILLS - text-to-sql-query？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install text-to-sql-query」即可一键安装，无需额外配置。
Aloudata CAN SKILLS - text-to-sql-query 是免费的吗？
是的，Aloudata CAN SKILLS - text-to-sql-query 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
Aloudata CAN SKILLS - text-to-sql-query 支持哪些平台？
Aloudata CAN SKILLS - text-to-sql-query 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 Aloudata CAN SKILLS - text-to-sql-query？
由 jackyujun（@jackyujun）开发并维护，当前版本 v1.0.0。
推荐 Skills