ClawHub
Back to skill

Security audit

SQL Cheatsheet

Security checks for vulnerabilities and agentic risk

Overview

This is a static SQL reference sheet with no executable code, though some example SQL commands could damage data if copied into a real database carelessly.

Reasonable to install as a SQL quick-reference skill. Before using examples that modify or remove data, preview affected rows, add appropriate WHERE clauses, use transactions or backups where possible, and avoid DELETE, TRUNCATE, DROP, or all-row UPDATE statements unless that is explicitly intended.

SkillSpector

Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (1)

Missing User Warnings

Medium
Confidence
89% confidence
Finding
The skill includes destructive SQL operations such as UPDATE without WHERE, DELETE FROM table, TRUNCATE TABLE, and DROP TABLE examples without prominent safety guidance that they can cause irreversible data loss if copied into a production environment. In a cheatsheet intended for quick reference, users may paste examples directly, so the lack of explicit warnings and safe-environment guidance increases the chance of accidental misuse.

Static analysis

No suspicious patterns detected.