Setup & Installation
Or with the ClawHub CLI, for registry-managed skill folders outside a full OpenClaw workspace:
Version History
Add strict table allowlist enforcement helper and policy checks.
What This Skill Does
Converts natural language descriptions into SQL queries across six database systems: PostgreSQL, MySQL, SQLite, SQL Server, Oracle, and MariaDB. All queries use parameterized inputs by default, with built-in injection detection, input validation, rate limiting, and audit logging.
It enforces parameterized queries and injection detection at generation time, catching security issues before they reach a database.
When to use it
- Translating a business question into a JOIN query without writing SQL manually
- Generating paginated report queries for admin dashboards
- Building parameterized search queries for user-facing web forms
- Auditing database access logs for suspicious query patterns
- Creating data migration scripts with validated INSERT and UPDATE statements
Example Workflow
Here's how your AI assistant might use this skill in practice.
User asks: Show all customers who spent over $500 in Q1 2024
- 1Parse natural language to identify required tables, filter conditions, and aggregation logic
- 2Generate a parameterized SQL query using JOIN and SUM with placeholders for the date range and spending threshold
- 3Run injection pattern detection on any dynamic identifiers
- 4Append index recommendations and a LIMIT clause for large datasets
- 5Return the formatted query, parameter list, expected result structure, and a language-specific execution example
A complete parameterized SQL query with documented parameters, performance notes, and a psycopg2 or mysql-connector code snippet for immediate use