Qlik Cloud
v1.0.3Complete Qlik Cloud analytics platform integration with 37 tools. Health checks, search, app management, reloads, natural language queries (Insight Advisor), automations, AutoML, Qlik Answers AI, data alerts, spaces, users, licenses, data files, and lineage. Use when user asks about Qlik, Qlik Cloud, Qlik Sense apps, analytics dashboards, data reloads, or wants to query business data using natural language.
⭐ 1· 2.2k·0 current·0 all-time
by@undsoul
Security Scan
OpenClaw
Suspicious
high confidencePurpose & Capability
The scripts and documentation implement a full Qlik Cloud integration (health, apps, reloads, Insight Advisor, automations, AutoML, Answers, alerts, lineage). That functionality is coherent with the skill name/description. However, the registry metadata lists no required environment variables or primary credential even though every script and the SKILL.md require QLIK_TENANT and QLIK_API_KEY. This metadata omission is an important mismatch.
Instruction Scope
SKILL.md and the included scripts limit runtime actions to calling the Qlik Cloud tenant API (constructed from QLIK_TENANT) with the QLIK_API_KEY. Scripts do not attempt to read arbitrary host files or send data to non-tenant endpoints. They do create a temporary file (/tmp/qlik_delete_response.txt) only when handling delete responses. Instructions do ask the user to add credentials to TOOLS.md and to run scripts with QLIK_TENANT/QLIK_API_KEY environment variables.
Install Mechanism
There is no install spec (instruction-only installer behavior). Files are provided as scripts (bash + python3). No external downloads, package installs, or extract-from-URL steps are present in the manifest, which lowers install-time risk.
Credentials
The runtime requires two environment values (QLIK_TENANT and QLIK_API_KEY) which are appropriate and minimal for the stated purpose. However, the registry metadata declares no required env vars and no primary credential. That inconsistency is problematic: the skill should have declared QLIK_API_KEY as the primary credential and listed the required env variables. The requested environment access (tenant URL + API key) is otherwise proportionate to the functionality.
Persistence & Privilege
The skill does not request always:true and does not appear to modify other skills or system-wide settings. It will be user-invocable and can be invoked autonomously by the agent (platform default), which is normal for skills.
What to consider before installing
Before installing, note these issues and take steps to mitigate risk:
- The skill's scripts and SKILL.md require QLIK_TENANT and QLIK_API_KEY, but the skill registry metadata did not declare those env vars or a primary credential. Ask the publisher to update the metadata (primaryEnv should be QLIK_API_KEY and requires.env should include QLIK_TENANT and QLIK_API_KEY).
- Review the included scripts yourself (they are plain bash + small python3 JSON parsers). They call only the Qlik tenant URL you supply; they do not call other external endpoints. Still, verify the tenant URL you provide is correct and trusted.
- Use least-privilege API keys: create an API key with the minimum privileges needed (read-only where possible) and test in a non-production tenant or with a low-privilege account first. Revoke the key if you later stop using the skill.
- Because some scripts trigger actions (delete app, run automations, trigger alerts, run reloads), restrict who can invoke the skill and confirm operator intent before running destructive actions.
- The delete script writes a temporary file to /tmp; ensure your environment's /tmp is monitored if that's a policy concern.
- If you require higher assurance, ask the publisher for an updated package that correctly declares required env vars and a primary credential, and for a short explanation of why each API action is needed.
Confidence note: The behavior appears to match the advertised purpose and no obvious exfiltration patterns are present, but the metadata omissions and the fact this package contains executable scripts rather than being purely declarative make this suspicious rather than outright benign.Like a lobster shell, security has layers — review code before you run it.
latest
Qlik Cloud Skill
Complete OpenClaw integration for Qlik Cloud — 37 tools covering the full platform.
Setup
Add credentials to TOOLS.md:
### Qlik Cloud
- Tenant URL: https://your-tenant.region.qlikcloud.com
- API Key: your-api-key-here
Get an API key: Qlik Cloud → Profile icon → Profile settings → API keys → Generate new key
⚡ When to Use What
| You Want... | Use This | Example |
|---|---|---|
| Actual data values (KPIs, numbers, trends) | qlik-insight.sh | "what is total sales", "which store has lowest stock" |
| App structure (field names, tables) | qlik-app-fields.sh | Understanding data model |
| Refresh data | qlik-reload.sh | Trigger reload before querying |
| Find apps | qlik-search.sh or qlik-apps.sh | Locate app by name |
Key insight: qlik-app-fields.sh returns metadata (structure), NOT actual data. To get real numbers, always use qlik-insight.sh (Insight Advisor).
Quick Reference
All scripts: QLIK_TENANT="https://..." QLIK_API_KEY="..." bash scripts/<script>.sh [args]
Core Operations
| Script | Description | Args |
|---|---|---|
qlik-health.sh | Health check / connectivity test | — |
qlik-tenant.sh | Get tenant & user info | — |
qlik-search.sh | Search all resources | "query" |
qlik-license.sh | License info & usage | — |
Apps
| Script | Description | Args |
|---|---|---|
qlik-apps.sh | List all apps | [limit] |
qlik-app-get.sh | Get app details | <app-id> |
qlik-app-create.sh | Create new app | "name" [space-id] [description] |
qlik-app-delete.sh | Delete app | <app-id> |
qlik-app-fields.sh | Get fields & tables (metadata only, not data values) | <app-id> |
qlik-app-lineage.sh | Get app data sources | <app-id> |
Reloads
| Script | Description | Args |
|---|---|---|
qlik-reload.sh | Trigger app reload | <app-id> |
qlik-reload-status.sh | Check reload status | <reload-id> |
qlik-reload-cancel.sh | Cancel running reload | <reload-id> |
qlik-reload-history.sh | App reload history | <app-id> [limit] |
qlik-reload-failures.sh | Recent failed reloads | [days] [limit] |
Monitoring
| Script | Description | Args |
|---|---|---|
qlik-duplicates.sh | Find duplicate apps (same name) | [limit] |
Insight Advisor ⭐ (Natural Language Queries)
| Script | Description | Args |
|---|---|---|
qlik-insight.sh | Ask questions in plain English, get real data values back | "question" [app-id] |
This is the primary tool for getting actual data! Use natural language:
- "what is total sales"
- "which stores have lowest availability"
- "show stock count by region"
- "items predicted out of stock"
Note: If you don't know the app-id, run without it first — Qlik will suggest matching apps. The app-id is UUID format (e.g., 950a5da4-0e61-466b-a1c5-805b072da128).
Users & Governance
| Script | Description | Args |
|---|---|---|
qlik-users-search.sh | Search users | "query" [limit] |
qlik-user-get.sh | Get user details | <user-id> |
qlik-spaces.sh | List all spaces | [limit] |
Data Files & Lineage
| Script | Description | Args |
|---|---|---|
qlik-datafiles.sh | List uploaded data files | [space-id] [limit] |
qlik-datafile.sh | Get data file details | <file-id> |
qlik-datasets.sh | List managed datasets* | [space-id] [limit] |
qlik-dataset-get.sh | Get managed dataset details* | <dataset-id> |
qlik-lineage.sh | Data lineage graph | <secure-qri> [direction] [levels] |
*Managed datasets are available in Qlik Cloud.
Automations
| Script | Description | Args |
|---|---|---|
qlik-automations.sh | List automations | [limit] |
qlik-automation-get.sh | Get automation details | <automation-id> |
qlik-automation-run.sh | Run automation | <automation-id> |
qlik-automation-runs.sh | Automation run history | <automation-id> [limit] |
AutoML
| Script | Description | Args |
|---|---|---|
qlik-automl-experiments.sh | List ML experiments | [limit] |
qlik-automl-experiment.sh | Experiment details | <experiment-id> |
qlik-automl-deployments.sh | List ML deployments | [limit] |
Qlik Answers (AI Assistant)
| Script | Description | Args |
|---|---|---|
qlik-answers-assistants.sh | List AI assistants | [limit] |
qlik-answers-ask.sh | Ask assistant a question | <assistant-id> "question" [thread-id] |
Data Alerts
| Script | Description | Args |
|---|---|---|
qlik-alerts.sh | List data alerts | [limit] |
qlik-alert-get.sh | Get alert details | <alert-id> |
qlik-alert-trigger.sh | Trigger alert evaluation | <alert-id> |
Example Workflows
Check Environment
bash scripts/qlik-health.sh
bash scripts/qlik-tenant.sh
bash scripts/qlik-license.sh
Find and Query an App
bash scripts/qlik-search.sh "Sales"
bash scripts/qlik-app-get.sh "abc-123"
bash scripts/qlik-app-fields.sh "abc-123"
bash scripts/qlik-insight.sh "What were total sales last month?" "abc-123"
See App Data Sources
# Simple: see what files/connections an app uses
bash scripts/qlik-app-lineage.sh "950a5da4-0e61-466b-a1c5-805b072da128"
# Returns: QVD files, Excel files, databases, etc.
Reload Management
bash scripts/qlik-reload.sh "abc-123"
bash scripts/qlik-reload-status.sh "reload-id"
bash scripts/qlik-reload-history.sh "abc-123"
Natural Language Queries (Insight Advisor)
# Find apps that match your question
bash scripts/qlik-insight.sh "show me sales trend"
# Query specific app with UUID
bash scripts/qlik-insight.sh "ciro trend" "950a5da4-0e61-466b-a1c5-805b072da128"
# Returns: "Total Ciro is 9,535,982. Max is 176,447 on 2025-01-02"
Qlik Answers (AI)
# List available AI assistants
bash scripts/qlik-answers-assistants.sh
# Ask a question (creates thread automatically)
bash scripts/qlik-answers-ask.sh "27c885e4-85e3-40d8-b5cc-c3e20428e8a3" "What products do you sell?"
Response Format
All scripts output JSON:
{
"success": true,
"data": { ... },
"timestamp": "2026-02-04T12:00:00Z"
}
Environment Variables
Required credentials (add to TOOLS.md or set as environment variables):
- QLIK_TENANT — Your tenant URL (e.g.,
https://company.eu.qlikcloud.com) - QLIK_API_KEY — API key from Qlik Cloud profile settings
Cloud-Only Features
The following features are Qlik Cloud exclusive (not available on Qlik Sense Enterprise on Windows):
- ⚙️ Automations — Low-code workflow automation
- 🤖 AutoML — Machine learning experiments & deployments
- 💬 Qlik Answers — AI-powered Q&A assistants
- 🔔 Data Alerts — Threshold-based notifications
- 🔗 Lineage (QRI) — Data flow visualization
- 📊 Managed Datasets — Centralized data management
Comments
Loading comments...