将 MySQL SQL（尤其是建表 DDL）转换为 Oracle SQL。用户提到“转为oracle”或“转换oracle”，或明确要求把 MySQL 语句改成 Oracle 语句时必须使用此技能。转换时强制执行类型、默认值和主键约束命名规则。

Security checks across malware telemetry and agentic risk

Overview

This appears to be a narrow SQL conversion skill, with no evidence of hidden access, persistence, credential use, or destructive behavior.

Install if you want an opinionated MySQL-to-Oracle SQL conversion helper. Review generated SQL before applying it to any database, especially in production, because the main risk is incorrect or over-eager conversion rather than security-sensitive access.

SkillSpector

By NVIDIA

Vulnerability Patterns

Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (2)

Vague Triggers

Medium

Confidence: 85% confidence
Finding: The trigger conditions are broad and mandatory, causing the skill to activate whenever the user mentions converting to Oracle without clear scoping or exclusion rules. This can route requests into a rigid transformation workflow unexpectedly, increasing the chance of incorrect or undesired SQL generation and reducing user control over how their request is handled.

Natural-Language Policy Violations

Medium

Confidence: 88% confidence
Finding: The description mandates use of this skill based on specific phrases, effectively forcing a particular response mode without explicit user opt-in. While this is not direct code-execution risk, it can override user preference and lead to usability and integrity issues, especially if the user wanted analysis, validation, or bilingual output rather than automatic conversion under fixed rules.

VirusTotal

66/66 vendors flagged this skill as clean.

View on VirusTotal