ClawHub
Back to skill

Security audit

database-agent

Security checks across malware telemetry and agentic risk

Overview

This database helper is not clearly malicious, but it gives an agent broad database access with weak built-in limits.

Install only if you intend to let the agent work with databases. Use least-privilege accounts, prefer read-only credentials for analysis, avoid production credentials unless you have reviewed the SQL manually, and do not use the raw query path on sensitive data unless you accept that results may be printed into the session or logs.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (3)

Description-Behavior Mismatch

High
Confidence
97% confidence
Finding
The CLI exposes a raw `query` action that accepts arbitrary SQL from `--sql` and executes it directly against the configured database. In the context of a skill advertised for analysis, schema inspection, safe data correction, and test data generation, this materially expands capability into unrestricted database access, enabling unauthorized data reads and potentially dangerous statements depending on driver/database behavior.

Description-Behavior Mismatch

Medium
Confidence
91% confidence
Finding
The code includes a general-purpose `execute_update` helper capable of running arbitrary UPDATE/INSERT/DELETE statements and committing them immediately. Even though it is not wired to a CLI action in this file, it creates latent capability for unrestricted destructive or integrity-impacting database modification that exceeds the skill's stated safe-assistance framing.

Missing User Warnings

Medium
Confidence
94% confidence
Finding
`execute_update` commits database changes immediately without any confirmation, dry-run, approval gate, or safety interlock. If this method is invoked with incorrect or malicious SQL, destructive changes become permanent quickly, increasing the risk of accidental data loss or unauthorized tampering.

VirusTotal

67/67 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.