ClawHub
Code PluginExecutes codesource-linked

Database

Native OpenClaw SQLite database plugin with schema, query, and CRUD tools

Community code plugin. Review compatibility and verification before install.
database · runtime id database
Install
openclaw plugins install clawhub:database
Latest Release
Version 0.1.0
Compatibility
{
  "builtWithOpenClawVersion": "2026.3.23-2",
  "pluginApiRange": ">=2026.3.23"
}
Capabilities
{
  "bundledSkills": [],
  "capabilityTags": [
    "executes-code"
  ],
  "channels": [],
  "commandNames": [],
  "configSchema": true,
  "configUiHints": false,
  "executesCode": true,
  "hooks": [],
  "httpRouteCount": 0,
  "materializesDependencies": false,
  "providers": [],
  "runtimeId": "database",
  "serviceNames": [],
  "setupEntry": false,
  "toolNames": []
}
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
✓
Purpose & Capability
Name/description match the implementation: the package registers tools for schema inspection, SQL execution, transactions, and CRUD and operates on a local SQLite file. No unrelated credentials, binaries, or config paths are required.
✓
Instruction Scope
SKILL.md instructs a local npm build and OpenClaw plugin install/enable/restart and documents the storagePath (defaults to ~/.openclaw/state/database/database.sqlite). Runtime instructions and registered tools operate on the local database only and do not read or transmit other system secrets or call external endpoints.
✓
Install Mechanism
There is no remote ad-hoc download; installer steps use npm install / npm run build and OpenClaw's plugin install workflow. package-lock shows many transitive packages (likely brought in by the OpenClaw dependency), but all are from the npm registry — no suspicious URL/extract operations in the manifest.
✓
Credentials
The skill declares no required environment variables or credentials and the code does not reference unexpected env vars or external credentials. It only writes to a configurable local storagePath.
✓
Persistence & Privilege
always is false and model invocation is allowed (platform default). The plugin stores its own SQLite file under the configured storagePath but does not request system-wide privileges or modify other skills' configs.
Assessment
This plugin appears to be what it claims: a local SQLite manager. Before installing: (1) choose or review the configured storagePath — don't point it at an existing sensitive file or directory; (2) be aware npm install will fetch transitive dependencies listed in package-lock (review package-lock if you want to audit exact dependencies); (3) the plugin will create and write the SQLite file under your home path and requires restarting the OpenClaw gateway to enable; and (4) because plugins can be invoked by agents, only enable it in agent environments you trust. If you need stronger isolation, run OpenClaw and this plugin in a separate user/VM/container.
Verification
{
  "hasProvenance": false,
  "scanStatus": "clean",
  "scope": "artifact-only",
  "sourceCommit": "a4eee48",
  "sourceRepo": "clawic/plugins",
  "sourceTag": "main",
  "summary": "Validated package structure and linked the release to source metadata.",
  "tier": "source-linked"
}
Tags
{
  "latest": "0.1.0"
}

Database Plugin

Native OpenClaw plugin that adds local SQLite database management with:

  • schema inspection for tables, columns, indexes, and full CREATE statements
  • raw SQL query and execution tools for advanced SQLite workflows
  • transactional multi-statement execution with rollback on failure
  • structured table, index, insert, select, update, and delete helpers

Install

npm install
npm run build
openclaw plugins install .
openclaw plugins enable database
openclaw gateway restart

Config

{
  plugins: {
    entries: {
      database: {
        enabled: true,
        config: {
          storagePath: "~/.openclaw/state/database/database.sqlite",
          resultRowLimit: 100,
          busyTimeoutMs: 5000,
          enableWal: true,
        },
      },
    },
  },
}

If storagePath is omitted, the plugin stores data in ~/.openclaw/state/database/database.sqlite.

Tools

  • database_list_tables
  • database_describe_table
  • database_schema
  • database_create_table
  • database_create_index
  • database_drop_index
  • database_drop_table
  • database_query
  • database_execute
  • database_transaction
  • database_insert
  • database_select
  • database_update
  • database_delete