Security audit
Security checks for vulnerabilities and agentic risk
This database helper is mostly transparent, but it asks for broad execution/write authority while teaching persistent database changes without clear safeguards.
Review before installing. Use this skill only when you want an agent to help with database-changing SQL, and require explicit approval before any CREATE, INSERT, UPDATE, DELETE, DDL, or transaction execution against a real database. Prefer test databases, verified connection targets, backups, and least-privilege credentials.
The skill advertises a very broad database-admin scope without clearly constraining when it should be used or requiring explicit user confirmation before suggesting or performing state-changing database actions. In an agent environment with read/exec/write tools, this can cause over-activation and lead to unsafe generation or execution of SQL against the wrong target or in inappropriate contexts.
The markdown teaches table creation, inserts, and transaction execution but does not warn that these operations modify persistent user data and may be irreversible or harmful if run in production. Because the skill exposes exec capability and presents actionable SQL snippets, an agent or user could apply them directly without backup, sandboxing, or confirmation, causing unintended data changes.
No suspicious patterns detected.
