ClawHub
Back to skill

Security audit

SQL Query Reviewer

Security checks for vulnerabilities and agentic risk

Overview

This is a simple SQL review instruction file with no executable code, though it asks the agent to remember aggregate issue patterns across reviews.

Safe for normal SQL review use. Do not paste secrets, production customer data, proprietary schemas, or sensitive business logic unless you trust the agent environment; disable or avoid persistent memory if you do not want aggregate SQL issue patterns retained across reviews.

SkillSpector

Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (1)

Ssd 3

Medium
Confidence
92% confidence
Finding
The instruction to track the most common findings across reviews and, after 20 reviews, report aggregate anti-patterns implies retention of information derived from prior users' inputs. In a multi-user agent environment, this creates a cross-session memory channel that can leak sensitive details or behavioral patterns from previous reviews into later outputs, even if only in summarized form.

Static analysis

No suspicious patterns detected.