qlik

Complete Qlik Cloud analytics platform integration with 37 tools. Health checks, search, app management, reloads, natural language queries (Insight Advisor), automations, AutoML, Qlik Answers AI, data alerts, spaces, users, licenses, data files, and lineage. Use when user asks about Qlik, Qlik Cloud, Qlik Sense apps, analytics dashboards, data reloads, or wants to query business data using natural language.

Security Scan

The skill's code and documentation clearly implement a Qlik Cloud integration, but the registry metadata does not declare the credentials and binaries the scripts actually require, and the SKILL.md suggests writing API keys into a TOOLS.md file — these inconsistencies and the risk of storing secrets in plaintext warrant caution.

Purpose & Capability

The skill name/description (Qlik Cloud integration) matches the included scripts which call Qlik Cloud APIs for apps, reloads, Insight Advisor, automations, AutoML, Answers, alerts, etc. That part is coherent. However, the skill metadata declares no required environment variables or primary credential while every script expects QLIK_TENANT and QLIK_API_KEY. The missing declaration of those required credentials in the registry metadata is an incoherence.

Instruction Scope

SKILL.md and README instruct the agent/user to run the provided bash scripts and to add Tenant URL and API Key to TOOLS.md. The runtime scripts only call the tenant endpoint and parse responses (no obvious unrelated system reads), which is appropriate. The concern: SKILL.md explicitly instructs storing API keys in a plaintext TOOLS.md file (pushing users toward persisting secrets in repo/config), which is a risky instruction and out-of-band from the registry's declared requirements.

Install Mechanism

There is no install spec (instruction-only install), and scripts are bundled in the skill. No external downloads or installers are used. That is lower-risk from an install perspective, though the presence of many executable scripts means reviewers should inspect them before running.

Credentials

The scripts consistently require QLIK_TENANT and QLIK_API_KEY and the README lists bash, curl, and python3 as runtime requirements. The registry metadata, however, lists no required env vars, no primary credential, and no required binaries. This mismatch is a proportionality/information issue: the requested secrets (API key) are appropriate for the stated purpose, but they are not declared where the platform expects them to be, and the skill also advises writing API keys into TOOLS.md which amplifies risk.

Persistence & Privilege

The skill is not marked always:true and does not request persistent system-wide privileges. However, SKILL.md's setup step encourages adding credentials to TOOLS.md (a file likely stored alongside skills), which could cause long-lived plaintext secrets in the workspace. The skill itself does not automatically persist new credentials or modify other skills' config.

What to consider before installing

This skill appears to be a functional Qlik Cloud integration, but there are important inconsistencies and privacy risks you should address before installing: - Metadata mismatch: The scripts require QLIK_TENANT and QLIK_API_KEY and need bash, curl, and python3, but the registry metadata declares none of these. Ask the publisher to update the skill manifest to explicitly require QLIK_TENANT and QLIK_API_KEY and list required binaries. - Do NOT store API keys in plaintext files (TOOLS.md or repository): SKILL.md tells you to add the API key to TOOLS.md which could leave secrets in your repo or agent workspace. Instead, keep the Qlik API key in a proper secret store or as an environment variable injected at runtime with minimal scope. - Review all scripts before running: Although the provided snippets call only the tenant URL and parse JSON, you (or an administrator) should quickly scan the remaining files (14 omitted in the manifest) to ensure there are no unexpected external endpoints or obfuscated/exfiltration logic. - Principle of least privilege: When generating the Qlik API key, restrict its permissions to only what the skill needs (read-only for queries, minimal write permissions only if you intend to create/delete apps or trigger reloads/automations). - Test in a safe environment: Run the scripts in an isolated environment or with a dedicated test tenant/account first to verify behavior and outputs. If you want to proceed, request that the publisher update the skill metadata to declare the required env vars and binaries and remove guidance that encourages storing secrets in repository files. If the publisher cannot or will not fix these mismatches, treat the skill as higher-risk and avoid installing it in production contexts.

Qlik Cloud Skill

Complete OpenClaw integration for Qlik Cloud — 37 tools covering the full platform.

Setup

Add credentials to TOOLS.md:

### Qlik Cloud
- Tenant URL: https://your-tenant.region.qlikcloud.com
- API Key: your-api-key-here

Get an API key: Qlik Cloud → Profile icon → Profile settings → API keys → Generate new key

⚡ When to Use What

You Want...	Use This	Example
Actual data values (KPIs, numbers, trends)	qlik-insight.sh	"what is total sales", "which store has lowest stock"
App structure (field names, tables)	qlik-app-fields.sh	Understanding data model
Refresh data	qlik-reload.sh	Trigger reload before querying
Find apps	qlik-search.sh or qlik-apps.sh	Locate app by name

🚨 Decision Tree:

User asks about data (numbers, KPIs, trends)?
  └─ YES → Use qlik-insight.sh
           └─ Response has 'narrative' or 'data'? 
              └─ YES → Return the results
              └─ NO → Try rephrasing, check drillDownLink
  └─ NO (structure/metadata) → Use qlik-app-fields.sh

Key insight: qlik-app-fields.sh returns metadata (structure), NOT actual data. To get real numbers, always use qlik-insight.sh (Insight Advisor).

Quick Reference

All scripts: QLIK_TENANT="https://..." QLIK_API_KEY="..." bash scripts/<script>.sh [args]

Core Operations

Script	Description	Args
qlik-health.sh	Health check / connectivity test	—
qlik-tenant.sh	Get tenant & user info	—
qlik-search.sh	Search all resources (returns resourceId)	"query"
qlik-license.sh	License info & usage	—

Apps

Script	Description	Args
qlik-apps.sh	List apps (supports space filtering)	[--space personal|spaceId] [--limit n]
qlik-app-get.sh	Get app details	<app-id>
qlik-app-create.sh	Create new app	"name" [space-id] [description]
qlik-app-delete.sh	Delete app	<app-id>
qlik-app-fields.sh	Get fields & tables (metadata only, not data values)	<app-id>
qlik-app-lineage.sh	Get app data sources	<app-id>

Reloads

Script	Description	Args
qlik-reload.sh	Trigger app reload	<app-id>
qlik-reload-status.sh	Check reload status	<reload-id>
qlik-reload-cancel.sh	Cancel running reload	<reload-id>
qlik-reload-history.sh	App reload history	<app-id> [limit]
qlik-reload-failures.sh	Recent failed reloads	[days] [limit]

Monitoring

Script	Description	Args
qlik-duplicates.sh	Find duplicate apps (same name)	[limit]

Insight Advisor ⭐ (Natural Language Queries)

Script	Description	Args
qlik-insight.sh	Ask questions in plain language, get real data values back	"question" [app-id]

This is the primary tool for getting actual data! Ask naturally:

• "what is total sales"
• "which stores have lowest availability"
• "show stock count by region"
• "items predicted out of stock"

Important:

1. Use resourceId (UUID format) from search results — NOT the item id

2. Check response for narrative and/or data — If both missing, try rephrasing

3. For data questions, use insight.sh NOT fields.sh — fields.sh = metadata, insight.sh = actual values

Users & Governance

Script	Description	Args
qlik-users-search.sh	Search users	"query" [limit]
qlik-user-get.sh	Get user details	<user-id>
qlik-spaces.sh	List all spaces (shared, managed, data)	[limit]

⚠️ Personal Space

Personal space is VIRTUAL in Qlik Cloud — it does NOT appear in the /spaces API!

# ❌ WRONG: qlik-spaces.sh will NOT show personal space
bash scripts/qlik-spaces.sh

# ✅ CORRECT: Use qlik-apps.sh with --space personal
bash scripts/qlik-apps.sh --space personal

Space types in Qlik Cloud:

• personal — Virtual, user's private apps (use --space personal)
• shared — Team collaboration spaces
• managed — Governed spaces with publishing workflow
• data — Data storage spaces

Data Files & Lineage

Script	Description	Args
qlik-datafiles.sh	List uploaded data files	[space-id] [limit]
qlik-datafile.sh	Get data file details	<file-id>
qlik-datasets.sh	List managed datasets*	[space-id] [limit]
qlik-dataset-get.sh	Get managed dataset details*	<dataset-id>
qlik-lineage.sh	Data lineage graph	<secure-qri> [direction] [levels]

*Managed datasets are available in Qlik Cloud.

Automations

Script	Description	Args
qlik-automations.sh	List automations	[limit]
qlik-automation-get.sh	Get automation details	<automation-id>
qlik-automation-run.sh	Run automation	<automation-id>
qlik-automation-runs.sh	Automation run history	<automation-id> [limit]

AutoML

Script	Description	Args
qlik-automl-experiments.sh	List ML experiments	[limit]
qlik-automl-experiment.sh	Experiment details	<experiment-id>
qlik-automl-deployments.sh	List ML deployments	[limit]

Qlik Answers (AI Assistant)

Script	Description	Args
qlik-answers-assistants.sh	List AI assistants	[limit]
qlik-answers-ask.sh	Ask assistant a question	<assistant-id> "question" [thread-id]

Data Alerts

Script	Description	Args
qlik-alerts.sh	List data alerts	[limit]
qlik-alert-get.sh	Get alert details	<alert-id>
qlik-alert-trigger.sh	Trigger alert evaluation	<alert-id>

Example Workflows

Check Environment

bash scripts/qlik-health.sh
bash scripts/qlik-tenant.sh
bash scripts/qlik-license.sh

Find and Query an App

# Search returns resourceId (UUID) — use this for all app operations
bash scripts/qlik-search.sh "Sales"
# Output: { "resourceId": "950a5da4-0e61-466b-a1c5-805b072da128", ... }

# Use the resourceId for app operations
bash scripts/qlik-app-get.sh "950a5da4-0e61-466b-a1c5-805b072da128"
bash scripts/qlik-app-fields.sh "950a5da4-0e61-466b-a1c5-805b072da128"
bash scripts/qlik-insight.sh "What were total sales last month?" "950a5da4-0e61-466b-a1c5-805b072da128"

See App Data Sources

bash scripts/qlik-app-lineage.sh "950a5da4-0e61-466b-a1c5-805b072da128"
# Returns: QVD files, Excel files, databases, etc.

Reload Management

bash scripts/qlik-reload.sh "abc-123"
bash scripts/qlik-reload-status.sh "reload-id"
bash scripts/qlik-reload-history.sh "abc-123"

Natural Language Queries (Insight Advisor)

# Find apps that match your question
bash scripts/qlik-insight.sh "show me sales trend"

# Query specific app with UUID
bash scripts/qlik-insight.sh "revenue by region" "950a5da4-0e61-466b-a1c5-805b072da128"

Qlik Answers (AI)

# List available AI assistants
bash scripts/qlik-answers-assistants.sh

# Ask a question (creates thread automatically)
bash scripts/qlik-answers-ask.sh "27c885e4-85e3-40d8-b5cc-c3e20428e8a3" "What products do you sell?"

Response Format

All scripts output JSON:

{
  "success": true,
  "data": { ... },
  "timestamp": "2026-02-04T12:00:00Z"
}

Environment Variables

Required credentials (add to TOOLS.md or set as environment variables):

• QLIK_TENANT — Your tenant URL (e.g., https://company.eu.qlikcloud.com)
• QLIK_API_KEY — API key from Qlik Cloud profile settings

Cloud-Only Features

The following features are Qlik Cloud exclusive (not available on Qlik Sense Enterprise on Windows):

• ⚙️ Automations — Low-code workflow automation
• 🤖 AutoML — Machine learning experiments & deployments
• 💬 Qlik Answers — AI-powered Q&A assistants
• 🔔 Data Alerts — Threshold-based notifications
• 🔗 Lineage (QRI) — Data flow visualization
• 📊 Managed Datasets — Centralized data management