Security audit
Security checks across malware telemetry and agentic risk
The skill is a coherent read-only SimpleERP Oracle database helper, but it warrants Review because it handles live database credentials, can persist them locally, and instructs agents to run live queries without a confirmation step.
Install only with a least-privilege read-only Oracle account. Avoid using the sync-env path for real passwords when possible; prefer short-lived environment injection or a protected secret manager, delete any workspace .env after use, and review queries before allowing the agent to run against production or sensitive ERP data.
When the user’s task needs a DB read or schema regeneration, **execute the commands yourself** in this workspace—do not only tell the user what to run, and **do not ask** whether it is OK to run `run-sql.mjs` or `gen-table-index.mjs` when the task clearly needs them. - **Automatic runs:** If `DB_*` credentials are available, run `npm run sql -- "<QUERY>"` immediately. Run `npm run table-index` when regenerating references. Ensure `npm install` once if modules are missing. - **Credentials missing:** Do not prompt for passwords. Let the script fail; tell the user only that `DB_*` must be set (see `.env.example`), without asking them to paste secrets into chat. - **Scope:** Use **only** `SELECT` / `WITH` / `EXPLAIN PLAN` through this script.
When the user’s task needs a DB read or schema regeneration, **execute the commands yourself** in this workspace—do not only tell the user what to run, and **do not ask** whether it is OK to run `run-sql.mjs` or `gen-table-index.mjs` when the task clearly needs them. - **Automatic runs:** If `DB_*` credentials are available, run `npm run sql -- "<QUERY>"` immediately. Run `npm run table-index` when regenerating references. Ensure `npm install` once if modules are missing. - **Credentials missing:** Do not prompt for passwords. Let the script fail; tell the user only that `DB_*` must be set (see `.env.example`), without asking them to paste secrets into chat. - **Scope:** Use **only** `SELECT` / `WITH` / `EXPLAIN PLAN` through this script.
2. Read references/table-reference.md or table-index.md as needed for correct table and column names.
3. **You** choose the read-only Oracle SQL (SELECT or WITH only) that answers ${QUESTION}. Use FETCH FIRST 50 ROWS ONLY unless a count or aggregate alone is enough.
4. Run the query (cross-platform):
- If .env is not set: node scripts/sync-db-env.mjs --db-user="${DB_USER}" --db-password="${DB_PASSWORD}" --db-connect-string="${DB_CONNECT_STRING}"
- Then: npm run sql:save -- "<your SELECT here>"
- Or one shot: node scripts/run-sql.mjs --db-user=... --db-password=... --db-connect-string=... -o output/last-query.json "<your SELECT>"
5. Read output/last-query.json and reply with:throw e;
}
const skillEnv = path.join(SKILL_ROOT, '.env');
if (fs.existsSync(skillEnv)) {
dotenv.config({ path: skillEnv });
}import path from 'path';
import { SKILL_ROOT } from './lib/paths.mjs';
const ENV_PATH = path.join(SKILL_ROOT, '.env');
const FLAG_MAP = {
'--db-user': 'DB_USER',2. Read references/table-reference.md or table-index.md as needed for correct table and column names.
3. **You** choose the read-only Oracle SQL (SELECT or WITH only) that answers ${QUESTION}. Use FETCH FIRST 50 ROWS ONLY unless a count or aggregate alone is enough.
4. Run the query (cross-platform):
- If .env is not set: node scripts/sync-db-env.mjs --db-user="${DB_USER}" --db-password="${DB_PASSWORD}" --db-connect-string="${DB_CONNECT_STRING}"
- Then: npm run sql:save -- "<your SELECT here>"
- Or one shot: node scripts/run-sql.mjs --db-user=... --db-password=... --db-connect-string=... -o output/last-query.json "<your SELECT>"
5. Read output/last-query.json and reply with:import path from 'path';
import { SKILL_ROOT } from './lib/paths.mjs';
const ENV_PATH = path.join(SKILL_ROOT, '.env');
const FLAG_MAP = {
'--db-user': 'DB_USER',63/63 vendors flagged this skill as clean.
Detected: suspicious.dangerous_exec