📦 SQL Assistant — SQL智能助手
v1.0.0一句话生成 SQL、解释复杂查询、自动优化性能、安全审查并输出 SQLite/PostgreSQL/MySQL 迁移脚本，让数据库开发零门槛。
0· 130·0 当前·0 累计
by 安全扫描
OpenClaw
安全
high confidenceThe skill's code, instructions, and required credentials are consistent with an AI-backed SQL helper that sends user SQL/text to api.evolink.ai for analysis; nothing in the package appears disproportionate or misaligned with its stated purpose.
评估建议
This skill will send any SQL or natural-language descriptions you pass to api.evolink.ai using the EVOLINK_API_KEY. If your SQL or prompts contain sensitive data (production table names, queries that include literals, or schema/data snippets), treat that as data shared with an external service. Before installing: ensure you trust the Evolink service and are permitted to send such content by your org policy; use a dedicated API key with least privilege and rotate it if needed; test with non-sensi...详细分析 ▾
✓ 用途与能力
Name/description (SQL generation, explanation, optimization, review, migrate) match the files and scripts. Required binaries (python3, curl) and the EVOLINK_API_KEY are used by the scripts to call api.evolink.ai — all expected for this functionality.
✓ 指令范围
SKILL.md and scripts are narrowly scoped: they read only files explicitly passed as arguments, construct API payloads with user-provided SQL or prompts, and send them to api.evolink.ai. The skill does not attempt to connect to databases or read unrelated system files/env vars. Note: the skill transmits SQL and descriptions to an external service (per design) — the claim that 'data is not stored' is an author assertion about the external service and not verifiable from the code.
✓ 安装机制
No risky remote installers or downloads. The package is effectively instruction-only plus an npm helper that copies files into a local skills/ directory. The npm installer is local file copy logic (no external code fetched during install).
✓ 凭证需求
Only EVOLINK_API_KEY is required (declared as primaryEnv) and is actually used to authenticate requests to api.evolink.ai. No unrelated secrets, system config paths, or broad credential requests are present.
✓ 持久化与权限
The skill does not request always:true, does not modify other skills' configs, and only writes temporary files during API payload construction (deleted via trap). The npm installer writes files into a skills/ directory and updates a local lockfile — standard installer behavior.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/4/10
Initial release: AI-powered SQL generation, explanation, optimization, security review, and migration for SQLite, PostgreSQL, and MySQL
● Pending
安装命令
点击复制官方npx clawhub@latest install ai-sql-assistant
镜像加速npx clawhub@latest install ai-sql-assistant --registry https://cn.longxiaskill.com