360 Secure SkillHub
360 安全技能中心

MySQL Natural Language Query Assistant

把自然语言分析需求转换为 MySQL 查询:先用脚本发现表结构和列注释,再生成 SQL,仅执行只读语句,做结构与结果双重校验后按模板给出最终 SQL、样本行与自然语言结论。写操作只生成预览 SELECT 和未执行的写 SQL,连接信息由环境变量提供,可能需安装 MySQL Python 驱动。

nocb
nocb
热度 38.76
最近更新 2026-05-11 17:46:49
分类:数据依赖:代码执行 / 第三方 API应用场景:数据处理 / 代码生成 / 调试排错 / 报告撰写

安装技能

复制下面的话术发给你的 Agent,它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill: npx secure-skills-cli add mysql-query-assistant
Metadata
name
mysql-query-assistant
description
translate natural-language analytics requests into mysql queries, connect to a live mysql database, inspect schema and column comments, execute read-only sql, and validate query correctness against real results. use when chatgpt needs to work with mysql through direct connection details provided by environment variables, especially for ad hoc analysis, sql generation, schema discovery, query debugging, or cautious database workflows that must verify results before presenting them. also use for restricted write workflows that first generate a preview select and never auto-execute the write statement.

Mysql Query Assistant

Use this skill to turn a user's request into safe MySQL work against a live database.

Core workflow

For every request, follow this sequence:

  1. Inspect connection prerequisites from references/connection-and-safety.md.
  2. Discover relevant schema first. Prefer column comments when available.
  3. Draft the SQL.
  4. Execute only read-only SQL with scripts/run_read_query.py.
  5. Perform double validation:
    • structural validation: tables, columns, joins, filters, grouping, and syntax match the request.
    • result validation: returned rows and aggregates look semantically consistent with the user's intent.
  6. If validation fails, revise the SQL and run it again.
  7. Present the final answer using the output template below.

Default behavior

  • Prefer SELECT queries only.
  • Never auto-execute INSERT, UPDATE, DELETE, REPLACE, ALTER, DROP, TRUNCATE, CREATE, GRANT, or REVOKE.
  • Keep result samples small by default.
  • When the request is ambiguous, use schema inspection to narrow candidate tables before writing SQL.
  • Prefer explicit column lists over SELECT * unless schema exploration is the user's goal.
  • Prefer bounded queries. Add LIMIT when the user did not ask for a full extract.

Schema discovery workflow

Before generating SQL, inspect schema with scripts/introspect_schema.py.

Use this order:

  1. List candidate tables.
  2. Inspect columns, data types, keys, and column comments for the most relevant tables.
  3. Infer business meaning from comments and names.
  4. Only then draft SQL.

If comments are missing, fall back to table names, column names, keys, and a few small probing queries.

Read-only execution workflow

Use scripts/run_read_query.py to execute the SQL.

The script rejects non-read-only statements. It also blocks multi-statement execution.

When verifying a query:

  1. Run the first candidate SQL.
  2. Review row count, sample rows, and whether the columns answer the request.
  3. If the result is empty or suspicious, explain why and try a corrected query when appropriate.
  4. If multiple interpretations are plausible, prefer the query best supported by schema and results, and say what assumption you made.

Restricted write workflow

When the user asks for a write operation:

  1. Do not execute the write statement.
  2. First produce a preview SELECT that shows exactly which rows would be affected.
  3. Then produce the write SQL separately.
  4. Clearly label the write SQL as not executed.
  5. Call out any missing safety condition such as a weak or absent WHERE clause.

Output template

Use this structure unless the user asks for a different format.

Final SQL

[final sql]

Validation

  • Structural check: [why the sql shape matches the request]
  • Result check: [why the returned data seems correct, or why confidence is limited]

Sample results

Show 5 to 20 rows when available and useful. Keep wide tables compact.

Result summary

Provide a brief natural-language summary of what the query shows.

Notes

Include assumptions, caveats, and any schema uncertainties.

Execution details

  • Use environment variables described in references/connection-and-safety.md.
  • Use scripts/introspect_schema.py for schema discovery.
  • Use scripts/run_read_query.py for executing read-only SQL.
  • If the python mysql driver is missing, install one of the documented options before running the scripts.

Examples

Example: analytics request

User request: 统计最近 7 天每天新增用户数

Expected approach:

  1. Inspect likely user table and created-at column.
  2. Confirm time column semantics from comments or names.
  3. Generate grouped date query.
  4. Run it.
  5. Verify the date buckets and counts look plausible.

Example: restricted write request

User request: 把 status = 'pending' 且 30 天前创建的订单改成 expired

Expected approach:

  1. Generate preview SELECT for the target rows.
  2. Generate UPDATE SQL separately.
  3. Do not execute the UPDATE.
  4. Warn if the table lacks a reliable key or if the filter looks too broad.