onequery-openclaw

onequery-openclaw is a skill for Claude Code, Codex from wordbricks/onequery. It costs 33 tokens per session (687 once invoked), scanned A, original, Apache-2.0.

A set of instructions for using the OneQuery command-line tool through OpenClaw to inspect organizations and data sources and run read-only SQL queries. SQL is a language for requesting data from databases.

In plain words
What is it for?
Use it to identify the current organization and data source, validate a query, and run small bounded reads of company or customer data.
Why use it?
It provides a controlled query process with organization and source checks, validation before execution, and limits on returned data.

Skill for Claude CodeCodex

Which agent this was written for is unclear — built for openclaw. Also seen: built for openclaw.

Good fit Use it to identify the current organization and data source, validate a query, and run small bounded reads of company or customer data.

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/wordbricks/onequery/onequery-cli
Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add wordbricks/onequery --skill onequery-cli
Clone the repo
git clone --depth 1 https://github.com/wordbricks/onequery

Made for: Claude Code, Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for onequery-openclaw

README.md
[![agentmods](https://agentmods.dev/badge/skills/wordbricks/onequery/onequery-cli/github.svg)](https://agentmods.dev/skills/wordbricks/onequery/onequery-cli)
Your own site
<a href="https://agentmods.dev/skills/wordbricks/onequery/onequery-cli"><img src="https://agentmods.dev/badge/skills/wordbricks/onequery/onequery-cli/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for onequery-openclaw

Your own site · 80×15
<a href="https://agentmods.dev/skills/wordbricks/onequery/onequery-cli"><img src="https://agentmods.dev/badge/skills/wordbricks/onequery/onequery-cli.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 33 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 687 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00033 $0.00687
Opus 5.5 $0.00013 $0.00275
Sonnet 5.5 $0.00007 $0.00137
Haiku 4.5 $0.00003 $0.00069

Measured 5d ago against content hash e7ff4fcedc38, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-01, from the pricing page.

Security

Grade A, and why

onequery-openclaw scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 5d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

packages/openclaw-plugin/skills/onequery-cli/SKILL.md · 56 lines

What it actually says

Use this skill when the user wants company or customer data that should be read through OneQuery-managed access, or when you need to resolve org and source context before a bounded query.

Use OpenClaw's exec tool to run the onequery CLI directly.

Use these commands in this order:

  1. onequery auth whoami
  2. onequery org current or onequery org list --page-size 25
  3. onequery source list --org <org> --page-size 25
  4. onequery source show <source> --org <org>
  5. onequery query validate --org <org> --source <source> --sql '<sql>' --max-rows 100 --max-bytes 1048576 --cell-max-chars 2000 --timeout-ms 60000
  6. onequery query exec --org <org> --source <source> --sql '<sql>' --max-rows 100 --max-bytes 1048576 --cell-max-chars 2000 --timeout-ms 60000

Rules:

  • Always pass an explicit --org to org-scoped source and query commands.
  • Prefer query validate before query exec for unfamiliar SQL or provider dialects.
  • Start with select 1, a row count, or a bounded aggregate before wide row dumps.
  • Keep reads aggressively bounded with --max-rows, --max-bytes, --cell-max-chars, and small page sizes.
  • query exec supports --page-size, --cursor, and --page-all; query validate does not.
  • Only run read-only SQL. Reject obviously mutating statements instead of executing them.
  • Treat informal source names as aliases to resolve, not literal source keys.
  • Use shell-safe argument construction. Do not pass user text through shell operators, command substitution, or chained commands.
  • For long or quote-heavy SQL, write it to a temporary UTF-8 file and use --file <path> instead of forcing brittle shell escaping.
  • If onequery is unavailable, ask the operator to install it or expose it on PATH.
  • If exec runs under restrictive approval or allowlist policy, ask the operator to allow the resolved onequery binary or enable skill-bin auto-allow.
  • In your final answer, report the org, source, and any request id returned by the CLI.

Recovery:

  • Auth issues: rerun onequery auth whoami, then ask the user to refresh the OneQuery CLI session if needed.
  • Org ambiguity: onequery org list --page-size 25
  • Source ambiguity: onequery source list --org <org> --page-size 25, then onequery source show <source> --org <org>
  • SQL shape issues: onequery query validate ...
Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 5d ago First seen · 56 lines · 33 tokens per session scan A e7ff4fcedc38

Subscribe to this mod's changes

onequery-openclaw is a skill published in the GitHub repository wordbricks/onequery (17 stars, last pushed 2mo ago), licensed Apache-2.0. It adds 33 tokens to every session and 687 once invoked, about $0.0001 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-25.

Related

Other skills, from other repositories

officecli-pitch-deck

Use this skill when the user is building a fundraising / investor pitch deck — seed, Series A / B / C, convertible note, SAFE round, strategic raise. Trigger on: 'pitch deck', 'investor deck', 'Series A deck', 'Series B deck', 'Series C deck', 'fundraising deck', 'seed pitch', 'VC deck', 'raising capital', 'term sheet…

iOfficeAI/OfficeCLI · 163 tokens

morph-ppt

Use this skill when the user wants a .pptx with smooth cross-slide animation — PowerPoint Morph transitions, Keynote-style continuous motion, shapes that grow / move / rotate as the slide advances. Trigger on: 'morph', 'morph transition', 'smooth transition', 'continuous animation across slides', 'Keynote-style…

iOfficeAI/OfficeCLI · 169 tokens

officecli-academic-paper

Use this skill to build academic-style .docx output: journal / conference / thesis chapters carrying formal citation style (APA, Chicago, IEEE, MLA), numbered equations, figure & table cross-references, footnotes/endnotes, bibliography, or multi-column journal layout. Trigger on: 'research paper', 'journal paper'…

iOfficeAI/OfficeCLI · 141 tokens

officecli-financial-model

Use this skill when the user wants to build a financial model — 3-statement model, DCF valuation, LBO, SaaS unit economics, sensitivity / scenario analysis, debt schedule, or fundraising projections — in Excel. Trigger on: 'financial model', '3-statement model', 'P&L + BS + CF', 'DCF', 'WACC', 'NPV', 'terminal value'…

iOfficeAI/OfficeCLI · 222 tokens

officecli-pptx

Use this skill any time a .pptx file is involved -- as input, output, or both. This includes: creating slide decks, pitch decks, or presentations; reading, parsing, or extracting text from any .pptx file; editing, modifying, or updating existing presentations; combining or splitting slide files; working with…

iOfficeAI/OfficeCLI · 106 tokens

officecli

Create, analyze, proofread, and modify Office documents (.docx, .xlsx, .pptx) using the officecli CLI tool. Use when the user wants to create, inspect, check formatting, find issues, add charts, or modify Office documents.

iOfficeAI/OfficeCLI · 56 tokens