Sql Generator
PassAudited by ClawScan on May 1, 2026.
Overview
This appears to be a benign SQL helper, with minor notes about provenance and local command-history logging.
Before installing, verify that you trust the publisher/source and be aware that one helper script can store command arguments locally. Generated SQL should be reviewed before copying into any real database.
Findings (2)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
You may not have a registry-verified source for the scripts, even though the visible code does not show harmful behavior.
The registry metadata does not establish a verified source or install path for the included scripts, so users should verify provenance before relying on the package.
Source: unknown; Homepage: none; No install spec — this is an instruction-only skill.
Use only if you trust the publisher, and compare the included scripts with the claimed upstream project if provenance matters.
SQL snippets, file names, or other arguments you pass to the helper could remain on disk in a local history file.
The helper creates a local data directory and records command names and arguments in a persistent history file.
DATA_DIR="${SQL_GENERATOR_DIR:-${XDG_DATA_HOME:-$HOME/.local/share}/sql-generator}" ... _log() { echo "$(date '+%m-%d %H:%M') $1: $2" >> "$DATA_DIR/history.log"; }Avoid entering secrets or sensitive production data as command arguments, and clear or redirect the history directory if needed.