by 安全扫描
OpenClaw
安全
high confidenceNULL
评估建议
This skill is instruction-only and analyzes SQL text you paste; it does not connect to databases or request credentials. Before using it, avoid pasting sensitive data (production connection strings, PII, or secrets) into the query or EXPLAIN text. If you need live profiling that queries your database, prefer a tool that integrates securely with your DB and follow your organization’s credential-handling policies. Otherwise, this skill appears coherent and appropriate for offline/explained SQL ana...详细分析 ▾
✓ 用途与能力
The name and description (SQL analysis, EXPLAIN interpretation, optimization suggestions) match the SKILL.md, README, and package.json. No binaries, credentials, or external services are required, which is consistent for a skill that relies on user-provided queries and plans.
✓ 指令范围
The SKILL.md instructs the agent to accept queries and EXPLAIN text from the user and produce analysis/rewrite suggestions. It does not instruct the agent to read system files, fetch database credentials, or send data to third-party endpoints. Note: because it does not connect to databases itself, accuracy depends on the user pasting representative EXPLAIN/ANALYZE output.
✓ 安装机制
No install spec or code files that run at install time exist; this is instruction-only. The presence of README and package.json is informational only and there are no downloads or extracted archives.
✓ 凭证需求
No environment variables, credentials, or config paths are requested. That is proportionate for a tool that analyzes user-provided SQL text rather than connecting to databases.
✓ 持久化与权限
always is false and the skill is user-invocable. There is no indication it modifies other skills or requests permanent agent presence.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/3/12
NULL
● 无害
安装命令
点击复制官方npx clawhub@latest install sql-profiler
镜像加速npx clawhub@latest install sql-profiler --registry https://cn.longxiaskill.com