← 返回 Skills 市场
siddontang

TiDB X

作者 siddontang · GitHub ↗ · v1.0.0
cross-platform ⚠ suspicious
319
总下载
0
收藏
0
当前安装
1
版本数
在 OpenClaw 中安装
/install tidb-x
功能描述
TiDB X — object-storage-native distributed SQL for AI agent workloads. Use when building agent memory, context storage, multi-agent coordination, Web3 indexi...
安全使用建议
What to check before installing: - Verify the skill source (the files reference a GitHub raw URL and a third-party API). Install only if you trust that source. - The SKILL.md examples call curl, jq, and the mysql client but the skill metadata lists no required binaries; ensure jq/mysql are present or update the metadata. - The provisioning API creates ephemeral DB instances and returns credentials (MYSQL_PWD). Anything your agent writes to that DB will be stored on a third-party service — do not send sensitive data (PII, secrets, PHI) unless you trust the provider and account isolation. - The provisioning endpoint appears unauthenticated; confirm billing/claim flow to avoid unexpected charges if instances are converted to permanent accounts. - If you don't want the agent to create remote resources automatically, restrict autonomous invocation for this skill or run it in a sandboxed agent environment. If you can confirm the upstream endpoints (zero.tidbapi.com and claim URLs) are legitimate and are comfortable with remote storage of agent data, the skill is coherent for its purpose; otherwise treat it as risky and avoid installing.
功能分析
Type: OpenClaw Skill Name: tidb-x Version: 1.0.0 The skill bundle is designed to teach an AI agent about TiDB X and facilitate its use. It includes instructions for provisioning a temporary database via a `curl` command to `zero.tidbapi.com` and connecting to it using standard `mysql` client commands. While this involves external network requests and handling database credentials, these actions are explicitly stated, aligned with the skill's purpose, and do not show any evidence of malicious intent such as unauthorized data exfiltration, persistence mechanisms, or prompt injection attempts to subvert the agent's core directives. The `curl` commands for self-installation from GitHub are also standard practice.
能力评估
Purpose & Capability
Name/description claim an object-storage-native SQL service for agent state and the SKILL.md provides SQL patterns and a provisioning flow for TiDB Cloud Zero — this is coherent. However the runtime examples use command-line tools (curl, jq, mysql client) and an unauthenticated POST to zero.tidbapi.com but the skill metadata declares no required binaries or credentials; those missing declared dependencies are an inconsistency.
Instruction Scope
Instructions tell the agent to POST to an external API to create ephemeral DB instances, parse the JSON, export MYSQL_PWD, and connect using the mysql client. Those steps are within the skill's stated purpose (provision + use a DB), but they assume presence of jq and mysql and will cause the agent to handle third‑party credentials and network connections — which can expose any data the agent writes to a remote service.
Install Mechanism
This is an instruction-only skill (no install spec, no code written to disk). README suggests downloading SKILL.md from a GitHub raw URL; that is a normal install pattern and lower risk than arbitrary binary downloads.
Credentials
The skill declares no required env vars/credentials, and it does not request unrelated secrets. But the runtime guide sets MYSQL_PWD from the provisioning response (temporary DB credentials). The metadata should have declared the need for local tools (jq, mysql) and warn that the agent will receive and use remote DB credentials.
Persistence & Privilege
always is false and the skill is user-invocable; it does not request permanent agent-wide privileges or modify other skills. Autonomous invocation is allowed by default (not flagged here) — note that this still permits the agent to run the provisioning flow unless you restrict invocation.
如何使用
  1. 确保已安装 OpenClaw(本地或 Docker 部署)
  2. 在对话框中输入安装命令:/install tidb-x
  3. 安装完成后,直接呼叫该 Skill 的名称或使用 /tidb-x 触发
  4. 根据 Skill 的参数说明提供必要输入,即可获得结构化输出
版本历史
v1.0.0
Initial release
元数据
Slug tidb-x
版本 1.0.0
许可证
累计安装 0
当前安装数 0
历史版本数 1
常见问题

TiDB X 是什么?

TiDB X — object-storage-native distributed SQL for AI agent workloads. Use when building agent memory, context storage, multi-agent coordination, Web3 indexi... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件,目前累计下载 319 次。

如何安装 TiDB X?

在 OpenClaw 或 Claude Code 对话框中运行命令「/install tidb-x」即可一键安装,无需额外配置。

TiDB X 是免费的吗?

是的,TiDB X 完全免费(开源免费),可自由下载、安装和使用。

TiDB X 支持哪些平台?

TiDB X 跨平台运行,可在任意部署了 OpenClaw / Claude Code 的环境中使用(cross-platform)。

谁开发了 TiDB X?

由 siddontang(@siddontang)开发并维护,当前版本 v1.0.0。

💬 留言讨论