Security audit
Security checks across malware telemetry and agentic risk
The skill matches its DBdoctor administration purpose, but it handles database authority and credentials with weak transport and execution safeguards that require review before installation.
Install only in a trusted, isolated environment and only if you need DBdoctor administrative access. Use HTTPS on a trusted network, prefer least-privilege DBdoctor and database accounts, protect or delete .token_cache, avoid putting database passwords in shell history, and require explicit human approval before running execute_sql or manage_instance.
"""
url = f"{config.base_url}{path}"
token = get_token()
resp = _requests.get(url, params=params, headers=_build_headers(token), verify=False, timeout=30)
# Refresh and retry once when token expires
if _is_auth_failure(resp):if _is_auth_failure(resp):
print("Token expired. Re-authentication required...", file=sys.stderr)
token = refresh_token()
resp = _requests.get(url, params=params, headers=_build_headers(token), verify=False, timeout=30)
resp.raise_for_status()
return resp.json()"""
url = f"{config.base_url}{path}"
token = get_token()
resp = _requests.post(url, params=params, json=json_body, headers=_build_headers(token), verify=False, timeout=30)
# Refresh and retry once when token expires
if _is_auth_failure(resp):if _is_auth_failure(resp):
print("Token expired. Re-authentication required...", file=sys.stderr)
token = refresh_token()
resp = _requests.post(url, params=params, json=json_body, headers=_build_headers(token), verify=False, timeout=30)
resp.raise_for_status()
return resp.json()65/65 vendors flagged this skill as clean.
No suspicious patterns detected.