← 返回 Skills 市场
432
总下载
0
收藏
0
当前安装
5
版本数
在 OpenClaw 中安装
/install timeplus-sql-guide
功能描述
Write and execute Timeplus streaming SQL for real-time analytics. Use this skill when the user wants to create streams, run streaming queries, build material...
安全使用建议
This is largely a coherent instruction-only guide for interacting with a Timeplus server over HTTP and requires only curl plus the Timeplus host/user/password — which is appropriate. Before installing or using it:
- Only provide credentials for a Timeplus instance you trust; the skill will send whatever SQL you run to that host using the provided credentials.
- Watch out for copy-paste pitfalls: several example snippets contain hard-coded credentials (DB passwords, AWS keys, Slack webhook URLs) and an example referencing TIMEPLUS_API_KEY which the skill does not declare. Do not copy those secrets into your environment or production SQL.
- Prefer least-privileged credentials (a user with only the permissions needed) rather than a highly privileged account.
- Be careful when creating Python Table Functions, remote UDFs, or alerts that post to webhooks: those can make outbound network requests and, if misused, could leak data to external endpoints. Review any generated UDF code and webhook URLs before running.
- If you need the management API example that uses TIMEPLUS_API_KEY, add that env var intentionally and treat it as a separate credential.
If you want, I can: (a) extract or rewrite the examples to remove hard-coded secrets and clearly mark where user-supplied secrets belong, or (b) generate safe templates that use placeholder env vars only.
功能分析
Type: OpenClaw Skill
Name: timeplus-sql-guide
Version: 1.0.4
The skill bundle provides the agent with high-risk capabilities, including the ability to execute arbitrary SQL queries via 'curl' and run arbitrary Python code on a Timeplus server through User-Defined Functions (UDFs) and Table Functions. It explicitly documents how to install external Python packages (e.g., 'SYSTEM INSTALL PYTHON PACKAGE') and perform network requests from within the database engine (references/UDFS.md, references/Python_TABLE_FUNCTION.md). While these features are aligned with the stated purpose of managing a Timeplus analytics platform, the combination of shell access, package installation, and arbitrary code execution represents a significant attack surface for remote code execution and data exfiltration if the agent is misdirected.
能力评估
Purpose & Capability
Name/description: write and execute Timeplus streaming SQL. Declared requirements: curl and TIMEPLUS_HOST/TIMEPLUS_USER/TIMEPLUS_PASSWORD. The instructions use curl against port 8123/3218 and these env vars — proportionate and expected for the described functionality.
Instruction Scope
SKILL.md and reference docs instruct the agent to run SQL via curl using the declared env vars and to create streams, UDFs, materialized views, ingest, sinks, etc. That stays within the Timeplus domain. However several examples in the references: (a) show using an undeclared TIMEPLUS_API_KEY header for the management API, and (b) include hard-coded credentials (e.g., example ClickHouse/MySQL/S3 credentials and a Slack webhook URL) which contradict the guide's 'never hardcode credentials' guidance and could encourage copy-paste of secrets. The skill's runtime instructions themselves do not tell the agent to read unrelated system files or extra env vars.
Install Mechanism
Instruction-only skill; no install spec and no code executed locally by the skill bundle. All remote actions are performed by the agent via curl calls to the Timeplus server — lowest install risk from the skill package itself.
Credentials
Declared env vars (TIMEPLUS_HOST, TIMEPLUS_USER, TIMEPLUS_PASSWORD) are appropriate and minimal for connecting to a Timeplus instance. The references include other credential-like variables (TIMEPLUS_API_KEY) and example AWS/CQ/DB passwords inside SQL snippets; those are not declared as required by the skill but are present in examples — this is a potential source of confusion and an insecure pattern if users copy-paste.
Persistence & Privilege
always: false, no install, and no modifications to other skills or global agent config. Autonomous invocation is allowed by default (normal), but the skill does not request elevated or persistent platform privileges.
如何使用
- 确保已安装 OpenClaw（本地或 Docker 部署）
- 在对话框中输入安装命令：
/install timeplus-sql-guide - 安装完成后，直接呼叫该 Skill 的名称或使用
/timeplus-sql-guide触发 - 根据 Skill 的参数说明提供必要输入，即可获得结构化输出
版本历史
v1.0.4
- Updated metadata: version set to 1.0.4 and added the `openclaw` requirements section for improved compatibility.
- Expanded environment and binary requirements now explicitly list all necessary environment variables and require `curl`.
- Minor correction in the description text.
- No changes to core usage examples, compatibility, or SQL instructions.
v1.0.3
- Added documentation for Timeplus SQL ALERTs and TASKs, expanding real-time analytics guidance.
- Bumped version to 1.0.3.
- Updated metadata in SKILL.md to reflect the new version.
v1.0.2
- Added metadata specifying required environment variables (TIMEPLUS_HOST, TIMEPLUS_USER, TIMEPLUS_PASSWORD), including descriptions and sensitivity for credentials.
- Updated version number to 1.0.2 in SKILL.md metadata.
- No changes to commands, example usage, or documentation content outside metadata.
v1.0.1
- Environment variable setup instructions now use a bullet-list format instead of a bash code block.
- Fixed formatting in the environment setup section for clarity.
- Added a missing backtick in the "Inspect a stream" error handling section.
- No functional or feature changes; documentation formatting only.
v1.0.0
Initial release of Timeplus SQL Guide.
- Provides reference and examples for writing and executing Timeplus streaming SQL via ClickHouse-compatible HTTP interface.
- Covers creating streams, running streaming/historical queries, materialized views, data ingestion, sinks, and random data simulation.
- Documents environment setup and required ports (8123 for SQL, 3218 for streaming ingest).
- Includes sample curl commands for common patterns: DDL, queries, inserts, windowing, materialized views, and error handling.
- Links to deeper references and official documentation for advanced features.
元数据
常见问题
timeplus-sql-guide 是什么？
Write and execute Timeplus streaming SQL for real-time analytics. Use this skill when the user wants to create streams, run streaming queries, build material... 它是一个面向 Claude Code / OpenClaw 的 AI Agent Skill 插件，目前累计下载 432 次。
如何安装 timeplus-sql-guide？
在 OpenClaw 或 Claude Code 对话框中运行命令「/install timeplus-sql-guide」即可一键安装，无需额外配置。
timeplus-sql-guide 是免费的吗？
是的，timeplus-sql-guide 完全免费，采用 MIT-0 许可证，可自由下载、安装和使用。
timeplus-sql-guide 支持哪些平台？
timeplus-sql-guide 跨平台运行，可在任意部署了 OpenClaw / Claude Code 的环境中使用（cross-platform）。
谁开发了 timeplus-sql-guide？
由 Gang Tao（@gangtao）开发并维护，当前版本 v1.0.4。
推荐 Skills