SQL Assistant
v1.0.0AI-powered SQL assistant. Generate SQL from natural language, explain queries, optimize performance, review security, and generate migrations for SQLite, Pos...
⭐ 0· 99·0 current·0 all-time
MIT-0
Download zip
LicenseMIT-0 · Free to use, modify, and redistribute. No attribution required.
Security Scan
OpenClaw
Benign
high confidencePurpose & Capability
Name/description (SQL generation, explanation, optimization, review, migrate) match the files and scripts. Required binaries (python3, curl) and the EVOLINK_API_KEY are used by the scripts to call api.evolink.ai — all expected for this functionality.
Instruction Scope
SKILL.md and scripts are narrowly scoped: they read only files explicitly passed as arguments, construct API payloads with user-provided SQL or prompts, and send them to api.evolink.ai. The skill does not attempt to connect to databases or read unrelated system files/env vars. Note: the skill transmits SQL and descriptions to an external service (per design) — the claim that 'data is not stored' is an author assertion about the external service and not verifiable from the code.
Install Mechanism
No risky remote installers or downloads. The package is effectively instruction-only plus an npm helper that copies files into a local skills/ directory. The npm installer is local file copy logic (no external code fetched during install).
Credentials
Only EVOLINK_API_KEY is required (declared as primaryEnv) and is actually used to authenticate requests to api.evolink.ai. No unrelated secrets, system config paths, or broad credential requests are present.
Persistence & Privilege
The skill does not request always:true, does not modify other skills' configs, and only writes temporary files during API payload construction (deleted via trap). The npm installer writes files into a skills/ directory and updates a local lockfile — standard installer behavior.
Assessment
This skill will send any SQL or natural-language descriptions you pass to api.evolink.ai using the EVOLINK_API_KEY. If your SQL or prompts contain sensitive data (production table names, queries that include literals, or schema/data snippets), treat that as data shared with an external service. Before installing: ensure you trust the Evolink service and are permitted to send such content by your org policy; use a dedicated API key with least privilege and rotate it if needed; test with non-sensitive examples first; and if you need offline/local-only analysis, avoid using the AI commands and rely on the included cheatsheets instead.Like a lobster shell, security has layers — review code before you run it.
latestvk977bqvkggbh19ehvp5x1faz1184khdk
License
MIT-0
Free to use, modify, and redistribute. No attribution required.
Runtime requirements
Binspython3, curl
EnvEVOLINK_API_KEY
Primary envEVOLINK_API_KEY
