ClawHub
Back to skill

Security audit

SQL大师工具(免费版)

Security checks for vulnerabilities and agentic risk

Overview

This is a legitimate SQL helper, but it gives agents command execution and write authority for database-changing tasks without clear confirmation or safety boundaries.

Install only if you are comfortable with an agent helping run database CLI commands. Use it first on local or test databases, require explicit approval before any CREATE, UPDATE, DELETE, import, restore, migration, or psql -f command, and make verified backups before applying generated SQL to important data.

A.I.G

Vulnerability Patterns
  • Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
  • Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
  • Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
  • Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
  • Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Findings (2)

Missing User Warnings

High
Category
Not specified by scanner
Confidence
97% confidence
Finding

The skill advertises backup, restore, migration, import, write, and exec capabilities but does not present prominent safety warnings, confirmation requirements, or dry-run defaults near those capabilities. Because the skill is intended for command-line use and includes exec/write tools, a user or upstream agent could trigger data modification, schema changes, imports, or destructive recovery actions that cause data loss, corruption, or service disruption.

Content

No source excerpt is available for this finding.

Vague Triggers

Medium
Category
Not specified by scanner
Confidence
94% confidence
Finding

The trigger condition is extremely broad: '需要数据库操作、SQL查询、数据存储管理时使用' can activate on many generic database-related requests. In an agent environment with exec/write capabilities, this increases the chance the skill is invoked for ambiguous prompts and performs unintended read/write or destructive database actions without sufficient user confirmation.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.