MySQL Natural Language Query Assistant

• Outcome: Pass
• Latest audit: May 29, 2026 at 8:44 PM UTC
• Version:
  1.0.0

Overview

This skill is a disclosed MySQL helper that can query live databases, so it should be used carefully but does not show hidden or malicious behavior.

Install only if you want an agent to query a live MySQL database. Use a dedicated read-only database account scoped to the needed schema, avoid production or admin credentials, review important generated SQL, and install Python database drivers only from trusted package sources.

SkillSpector

By NVIDIA

Vulnerability Patterns

• MCP Least Privilege: Underdeclared Capability, Wildcard Permission, Missing Permission Declaration
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Lp3

Medium

• Category: MCP Least Privilege
• Confidence: 90% confidence
• Finding: The skill explicitly relies on environment variables for database connection details and on live MySQL connectivity, but no permissions are declared. That creates a capability transparency gap: a host or reviewer may not realize the skill can access sensitive credentials and exfiltrate database contents over the network. In a database-access skill, undeclared env and network access materially increase risk because the skill can reach production data stores directly.

VirusTotal

66/66 vendors flagged this skill as clean.